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; Most scanners use ONDE based upon ж AE Metal- 
| Oxide Semiconductor (CMOS) technology. CMOS offers a 


с power budget, plus a low failure rate after infant mortality. 


To the hacker holding a hot soldering iron, one drawback to 

"^ CMOS parts js that they can be destroyed by tiny static 

. discharges. Even a shoe scuffed on the floor, or a sleeve 

. rubbing on a cabinet, can sometimes generate enough static 

. Cbarge to destroy a CMOS part, and you might not even feel 

] it! The threat is the difference between your body's potential 

i and that of the part. There can be no discharge with no 
difference in potential. 


aa Static might not kill the part outright, but "injure" it, making ў 
, It susceptible to failure below its rated tolerances. V 
"i Microscopic examination of failed parts show traces that had 3 pow 
: been eroded till their width was reduced, When such parts NS 
fail in service, it's usually after they're buried three layers 1 
|! deep in circuitry! 
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4 ' static potential to develop between you and the innards of 

4. your scanner. You can, for instance, tape wire to your metal ` 

у watchband and run it to a solid ground, store static-sensitive 
parts in protective bags, and use common sense. j 


EA 7 Remember this: most CMOS component failures result 
"S х from static damage at some point in the production 
TES t process. 
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FOREWORD 


As 3 youth I read Heinlein. Um giad to be around 
{йау W only to see Wis amazing conversion of 
Potion to reality One nigktin V eman ; 


science fx 
did afew drinks, ; t mv сацал g eee 
M S if^ ранду WI 


mute Was tise (e die 
GU Pees Even ijn 

* ES. x Me Re EET 

OMIM RE that someudy ГСУ 


Was 7 happenin c. and E ddn’ vant to miss it. 


It’s 30 years lier, and I'm still here, and it's 
getting more exciting by the moment. 


Unless you live in a cave, vou're a witness to the 
accelerating pace of technology. Some experts 
believe the sum of human knowledge has doubled 
every seven months for the last five years. 


Other experts disagree. Their research argues that 
the rate is every seven weeks. And then there's 
that group on a distant mountaintop that believes 
that mankind has already learned everything we 
need to know. But they're in the minority. 


As for те. I want it all. Even if our knowledge 
doubled every seven minutes Га say the same 
thing. The tools for increasing and managing our 
Knowledge become more efficient everv дау, but 
what we discover is that the amount of possible 
knowledge 15 infinite, and as we grow more 
apable of collecting and processing information, 
the more we realize how very little we do know, 


But the situation is improving. and communication 
is a major part of that improvement. 


Both Elephants and Jackasses are trying to take 
credit for something called the "Information 
Superhighway," a road traveled by an 
infinitesimal percentage of humankind. 


Today, the nature of cyberspace access means that 
only about 50 million of the world’s people can 
get there. So one limitation is that the population 
of cyberspace is so small. Worse, access takes 
special skills. and works so slowly! 


You see, the Internet, Prodigy, Delphi, AOL, 
Compuserve, and a near-infinity of BBSs all 
connect their memberships with strands of copper 
wire and fiberoptic cable. 


That was advanced technology in 1975, when 
such systems were being conceived and 
developed. It worked well, and it works today. 


Ви: our information has at least tripled since then. 
night And the nex: leap forward will handle an 
order ef magnitude more in! formation ai an order 

of magniuse greater speed .. but wirelessls. 
Hee ys happening. g and why tae savvy 
сайы + рг епагес cori 


First the telepnone system is slow, Twisted 
Copper and iusaa mental physics ma its speed. 
апд cannot even go fast enough то support 
conventional television. Second. being connecied 
to ine world through à modem might be exciting, 
but because that connection is à wire you're not 
mobile! Worse, the interface to cyberspace is 
hand-typed words! How exciting can it be when 
you must sit down to enjoy it, and must use à 


keyboard? 


But in either seven days or seven years (or 
sometime in between) a combination of wireless 
and speech recognition wil] change all that. The 
"rest of the world" will get hooked up not with 
expensive and vulnerable copper cables strung 
from poles, but with wireless links to hubs that 
uplink to satellites and then downlink into the 
network “Wireless?” It's cellular. Personai 
Communication Systems, VSAT (very small 
aperture terminal), Personal Communication 
Networks, HandyPhone, Cellular Technology 
Two «CT2), and wireless modems by the 
truckload. 


In this country, the FCC has allocated persona! 
communication frequencies in high UHF, in low - 
microwave, and in mid-microwave. And the 
industry is moving rapidly to provide the low 
cost, high reliability, easy to implement 
components required by cost-effective hardware 
designed for those bands. Specifications that cost 
$50 two years ago are $5 today, and those parts 
are not only cheaper, they're better. 


What can you expect? I would say “а wrist-watch 
pager," but the new Seiko unit just hit the local 
market. How about a 5.4 GHz shirt-pocket 
personal micro-communicator (MC). Like the 
Newton, but with voice recognition instead of 
handwriting recognitton — and with a wireless link 
to the Superhighway. 


I'll bet that (long) before the year 2000 you'll be 
able to buy an integrated unit that's 
simultaneously a personal telephone, data 


manager, tape recorder, answering machine, 
pages, security system, shopping system, 
newsgatherer, location system, address book, fax 
machine, garage door opener, stock market 
reporting system, weather data display, sports 
information display, pet-, kid-, and wife-finder, 
clock, computer, port to cyberspace, and coffee- 
maker. Okay, forget the coffee... Besides, the 
coffee accessory makes it larger than a pocket 
calculator, and the marketers say that's the limit 
we consumers will accept. And just who are the 
designers of such wonders? 


In 1960, if someone said he was an "electronic 
engineer" you knew exactly who you were talking 
to. For the past two decades (as information 
increased by a factor of at least erght!), the world 
has watched the electronics industry divide into 
two separate parts: computing and 
communication. Radio engineers and the 
computer people each suspected the other of 
smoking and eating red meat. and they rarely 
talked face-to-face. Well, that's over. 


The next generation of personal electronics will 
combine these once diverse functions, leading to 
yet another revolution in growth of information 
and our ability to collect and manage it. And in a 
Darwinian way, the universities are already 
spitting out engineers who can talk both topics! 
The world is moving rapidly toward goals that 
few understand today... but some of us will 
develop that understanding, and will take 
advantage of it. 


Now, what about you? Because you already 
know how to spell “КЕ,” can use a computer (you 
can, right??), have one or rnore radios, are 
technically nosy, and are very smart (check the 
glossary under Hacker), you're a super candidate 
for the new generation in communication and 
personal computing. There's already a small 
computer in your scanner, so the next step is to 
hook it up to a bigger one. 


Bill Cheek's Ultimate Scanner differs from 
scanners of the past by many factors. of which the 
most important is the cable to a computer. When 1 
first picked up this manuscript I expected to see a 
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prescnption for a new sort of scanner that could 
be built from scraps in my junkbox. But when I 
reached for a VCO and a bag of GaAsFETs, Bill 
slapped my hand away and told me that to have an 
ultimate scanner requires only a commitment to a 
goal on which the world electronic industry is 
already spending billions (trilltons?). 


That goal ts a combination of radio plus computer. 
Okay, Bill's got me aboard. He's right... there's 
just too much information to handle with the old 
techniques. I'm tired of 3x5 cards, scraps of 
paper every where, and calluses on my 
programming finger. 


Bill says that this book is only the first in a new 
series. Boy, am I glad! I was afraid that "ultimate" 
meant this was my last chance to enjoy the style 
and wit of that crazy fountain of knowledge. In 
fact, it's my first look at the next generation of our 
wonderful hobby: the marriage of the scanner and 
the computer. 


And who else but Bil could send us there? He 
paid for your ticket! This book contains complete 
plans, procedures, sources, and parts lists for his 
computer interface, and he gives us tbe software! 
And if you decide to write the software yourself, 
Bill will even give you the Software Developer's 
Kit... also free! 

As Bill says, "it's time to rev up your computer." 
Have you got one? No? So what's your excuse? 
If you don't have a computer, maybe you can 
trade in this book for a buggy whip. 


And if you do have one, this book is the path to 
the future of our hobby. 


You're gonna love it! 


Henry Efscnson 
LtCol USMC (ret) 


Co-founder: Sciteg Electronics 


Author: Scanners & Secret Frequencies 
Audio Modification Manual 

Rotary Wing Aerodynamics 

The Television Gray Market 
TravelScan 
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INTRODUCTION 


Hot stuff coming down, Hackers! 


A river of blood, tears, and wine cut new channels 
in the land since my original Scanner Modification 
Handbooks were unleashed. Laws changed: 
technology changed; ways of life changed; and I 
changed. You changed. too. 


A metamorphosis ripped through as a blur in some 
areas, while others lagged and dragged, like 
growing grass and drying paint. Some were as 
pleasant as a root canal; others were as painful as 
winning the lottery. Many were subtle. 
unnoticeable, My life underwent some of the most 
notable of changes. 


My two Scanner Modification Handbooks were 
banged out on an Apple He computer with 
AppleWorks software. I dabbled in electronic 
communications on a few BBS's with a new 
2,400-bps modem that cost the better part of 
$200. State-of-the-art modems were 9,600-bps 
and priced upwards of $600. 


Drafts of my Scanner Modification Handbooks 
were printed on daisy wheel and dot-matrix 
printers. In stark contrast, The Ultimate Scanner 
drafts were printed on a laser printer while others 
were transmitted to the publisher via the [ntemet. 
or on my BBS. 


The Apple ile gathers dust now, as a fleet of state- 
of-the-art PC's work full tme around my shop 
and home on a local area network (LAN). Several 
computers are strategically located in my work 
station alone. while Cindy and the kids each have 
one or more. A notebook computer floats around 
the family circle to whomever needs tt most at the 
time. Sometimes there !s a scramble. We often 
need two ог more computers at г nme. 


At least one and sometimes two computers are 
dedicated to my scanners and electronic 
workbench. One computer runs the Hertzian 
Intercept BBS. and functions ах the LAN post 
office and server to the Internei — and to other 
worldwide electronic forums. Our cornputers are 
equipped with fax and connections to the Internet. 
BBS's, and information services with high speed 
28,800-bps modems. Some of our family 
computers are "stuck" with cheap 14.400-bps 
па: modems. The kids won't touch a 2.400-bps 
modem now. 


Getting the picture? Something happened! The 
common denominator is change The times. thes 


| 


are a'changing, and we hackers have no choice 
but to go along because the nature of what we do 
is to react to the communication industry. And, 
overall, it’s changing a lot, and rapidly. 


Strangely, scanners haven't changed much, arid 
the PRO-2004 remains a state-of-the-art receiver. 
It may be the best scanner of all time. Differences 
between the 1995 PRO-2035 and the 1986 PRO- 
2004 are less "radio technology” than appearance 
and software. This is opposite to the progress in 
the computer hippodrome, where there is no 
comparison between 1986 and 1995 PCs! How 
can the scanner and computer scenes be so 
dissimilar? 

Scanners are not tbe only hardware on the Hobby 
Radio scene to suffer from stymied progress. 
Frankly, there has been little real advancement in 
any aspect of Hobby Radio for nearly ten years. 


The 1978 Cobra 2000 GTL and Cobra 148 GTL 
remain the top runners on the Citizens Band 
scene. Hàm radios come and go, but the top 
performers of five and ten years ago remain 
competitive today. Shortwave radios haven't made 
any quantum leaps in the last ten years. Radio saw 
progress, but not Hobby Radio... 


Ten years ago, cellular telephones were black 
magic hardware, so costly that only the more 
affluent could afford them and the service. 
Nowadays, cellular phones are almost free. 
Before long, cellular phones might be worn on 
your wrist, like today’s smallest pagers. You once 
could recognize a doctor by his pager, but today 
they’re everywhere! 


Cordless telephones have leaped into spread 
spectrum in the 900MHz band. And 800MHz 
trunked radios are ever-evolving to higher states 
of the art that help both industry and public safety 
agencies run efficiently and privately. VCR, 
television, and home entertainment systems are 
racing to keep pace with the technology, and new 
features appear every day as developers push to 
produce salable innovation. 


As I see it, the thread common to those areas 
where radio is evolving at the highest rate is... 
computers! And that stands to reason. because the 
science of combining computing and 
communication ts гле jeading edge of 
techaotogicai advancement So why aren’: hobby 


racios advancing а! à comparable pace? 
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I don't know. Perhaps it is because hobbyist 
consumers are slowpokes on the computer scene. 
Perhaps the casual hobbyist is stil] content to 
manually punch in 400 channels worth of 
programming into a PRO-2006. 


I do know that by and large, radio hobbyists are 
not very interested in computers. and most are no 
more interested than they have to be. Computing 
and radioing are pursuits in two different 
directions... or, they used to bc. Today, they are 
converging. 


Business and industry. however, know a little 
secret driven by economics: computers control 
communication systems more effecuvely, and at a 
lower cost. than humans can. Few hobbyists 
relate to that. 


Sure, there are exceptions, and I am one. I wasn't 
always computer oriented, though. The Apple Пе 
arrived in 1984 only when my Selectric typewriter 
went on the fritz and couldn't be economically 
repaired. That Apple was barely more than a 
glorified typewriter until about 1990, when 1 
began to see the light after my fingers wore down 
to the bone punching and poking scanner keys. 


Now, not only do computers control my scanners, 


but also the test equipment at my work bench, my 
security systems, and almost all of my 
communication and research resources! 


І no longer waste gas, oil. and time driving to the 
public library to look up information or to check 
out books. I ows libraries now, in my computers 
and on my CD-ROMS. Furthermore, I have 
instant connectivity to the libraries and other great 
information storehouses of the world. 


Before you get a nasty case of hives at the idea of 
wrapping your brain around a computer. consider 
this: just a few years ago ] was among the 
computer-illiterate'! 


Many of you call me a scanner guru, but now, to 
other groups, I have become more of a computer 
guru. I'm not sure that I deserve either title, but I 
did set out in 1991 to teach myself about 
computers. I met the enemy head-on, and 
conquered. Me! You can, too. And you must... 


Radio is poised on the brink of change, and unless 
you change with it your days of enjoying it may 
be numbered. That's because radio has not 
changed much over the last (ew years, but 
everything else has, and the status quo can't last 
much longer. Broadcast, land mobile, and point- 
to-point radio, as we have known them for the last 
eighty years, are becoming less and less 
competitive with evolving new communication 
technologies, and the move is on. 


I think that a combination of emerging computer 
control. digital encrypuon, efficient modulation 
methods, better communication media, and 
legislation are forcing radio as we know it to seek 
a new balance. 


That result is likely to include less radio and more 
computer; computing makes it possible to use 
radio channels more efficiently. And the more 
radios there are, the more congested the channels 
become, so efficiency is critical because there is 
only so much spectrum. So computers and radios 
are getting married, and we're there for the 
wedding. 


Relax, this book is not about computers; it's about 
the Ultimate Scanner. Computers just play a 
critical support role. Now, look at the handwriting 
on the wall. 


Even some of my visually-challenged friends and 
associates can sec it. For you, it’s there in plain 
sight. 


£t 


H. Marshal] McLuhan 


С COMMUNICATING 


Making Contact With Me (and the Rest of the Hobby) 


That s what radio is all about, isn't it? Before we 
heat up our soldering irons and get into the world 
of hacking and chopping our scanners, let's talk 
about scannists helping each other. 


COMMUNICATING WITH ME 


Readers тау recall "Operation Assist" (rom my 
Scanner Modification Handbooks, Volumes | and 
2, in which J offered to help those having 
problems with their scanner modifications. Thai 
offer exploded in my face with a fireball of well- 
meant communication other than requests for 
technical assistance. The volume of mail and 
telephone calis got far out of hand, as i spent 
hours every day with hebby chit chat, giving 
advice for this. counseling for that, and neglecting 
the basics of running a business and a family. ] 
had to fat! back... 


Eacept- the rarest of instances (апа don t caunt 
по vov: sinoking, meited-down, scanner beng 
aualitieds T can't provide hobby tech support by 
тат un ^or by voice telephone. In rare 
cassés whee азай repis only rossibie мау 


ihe 


iy the 


to get assistance with a modification, J will 
respond to questions that can be answered with a 
simple YES or NO, if a SASE and a loose extra 
stamp accompanies the request (foreign replies 
required a self-addressed envelope and two (2) 
IRC’s). On the envelope where it can easily be 
seen, mark "OPERATION НЕГР,” which will get 
it placed somewhere in the middle of the pile. If] 
càn answer your questions with simple YES's and 
NO’s, you'lJ hear from me. 


Take serious ите to prepare your questions to 
avoid answers that require a lengthy dissertation. 
research, and time. I simply cannot provide 
custom advice. custom problem diagnosis, custom 
instructions, etc., by mail or telephone, and that is 
ali those two media offer: private, custom, one- 
on-one exchanges of ideas. However... 


і want to help you address problems encountered 
with your scanner upgrade efforts, but compared 
o the past the commumeation methods must 
change. First of al], please don't waste your nickel 
trying to reach me by telephone. For three reasons 
1 am not available for hobby talk by phone: (1) My 
work is too focused to репти (пе distraction of 
coming io the phone every few minutes "to 


answer a couple of questions." (2) The spoken 
word is an inferior medium for conveying 
technical information - there's no illustration, I 
might say something bass-ackwards and confuse 
you, or your ears might hear bass-ackwards. Or 
both. And, (3) I am hard of hearing. My ears were 
made into notch filters by things that went bang in 
and around Vietnam. 


COMMUNICATION PATHS 


Though I won't use the telephone for hobby chit- 
chat, here are several methods (in order of 
preference) by which you and I can communicate 
on matters from technical assistance to hobby chat 
to private confidences: 


Hertzian Intercept BBS: (619) 578-9247, from 
3:30pm- 1:30pm - my personal BBS (see text) 


FidoNet Public Forums: Any FidoNet BBS (see 
text) 


Primary Internet e-mail: bcheek @cts.com 


Another Internet address: 
bill.cheek @f731.n202.z1.fidonet.org - e-Mail 


FidoNet address: 1:202/731 — Netmail or 
Echomail (see explanation in text) 


CompuServe Address: 74107,1176 — e-Mail, but 
no Internet replies from this address 


US Mail address: PO Box 262478, San Diego, 
CA 92196-2476 


NOTE: I cannot respond to hobby questions by 
mail UNLESS questions are answerable by a 
simple YES or NO. The clearer you are in framing 
your questions, the higher the likelihood that 
you'll get useful and timely answers. One Self 
Addressed Stamped Envelope (SASE) must 
accompany such requests. No foreign SASE's or 
foreign postage; they're no good in the U.S. 


My FAX number: (619) 578-9247 after 5:30pm 
but before 1:30pm, Pacific Time 


NOTE: I cannot FAX replies to hobby questions 
and requests for assistance. My FAX 1s primarily 
for business purposes — to make sure 1 get 
information in a timely manner. Use it to SEND 
info on hot developments or to submit items for 
my monthly World Scanner Report, ot even to 
prepare me for a question coming in on my BBS. 
But remember, the fax is generally a diode - 
because of cost, fax information flows in one 
direction only. 
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THE HERTZIAN INTERCEPT BBS 

For several reasons, I like to help via my BBS: 
(1) It saves time. (2) It saves me money. (3) It 
saves hundreds of repetitions of the same replies 
to the same question. (4) My cotton-bale ears are 
no handicap 1n electronic communications. And, 
most importantly, (5) it allows me to render a 
valuable service to a wide cross-section of the 
Hobby Radio Community — and that's satisfying! 


You see, the tech support areas of my BBS are 
public conferences where a single question and 
reply can be read by hundreds of other hobbyists! 
Don't give that much concern right now if you 
don't understand this part of the concept. When 
you need technical help, use your computer, 
modem, and terminal program to dial and connect 
with my BBS. If you don't have a modem or a 
computer... maybe it's time? If you do, then here 
is a]] you need to know to make a successful 
connect with my BBS at speeds up to 28,800 bps. 


Set your terminal program for 8 data bits, NO 
parity, and J stop bit: “8N 1.” Even if you don’t 
understand this, your terminal program will show 
you how to make the setting. Also set up for TTY 
emulation unless you know your system can 
support ANSI. 


Set your modem initialization string to “auto- 
negotiate" the highest possible speed. This is 
AT&N for some modems, but check your 
manual. Otherwise, enable v.32, v.34, or v.42. 
Disable MNP-5. If you don't know about these 
things don't be concerned; most modems and 
terminal programs are smart enough to negotiate a 
good connection. Most modems today comply 
with the standard Hayes AT commands, and if 
yours does then the following applies, and your 
modem manual should have everything you need 
to decipher it. 


Include in your modem init string the following 
commands: $7=9@ 59=30 510=30. If your 
phone has "CALL WAITING" service, set your 
modem dial prefix to: *7@,. Here is a good init 
string for many high speed modems: 


AT&F&CI&D2&NOS7z90S9-30S10-30 


Dial my BBS at: 619-578-9247, but not between 
1:30-5:30pm, weekdays Pacific times, when the 
BBS is closed. 


Once you connect, log in, and are presented with 
"The Opening Menu," my system will take you by 
the hand and guide you. 


Making Contact with Me and the Rest of the Hobby 


Your major benefit from using the Hertzian 
Intercept BBS is that I prepare and post most 
replies within 24 hours of receipt. Сай! one day 
and check back the next for a timely and pertinent 


reply. 
Most replies are posted by noon. 


E-MAIL 


I am also accessible via E-Mail on the Internet, 
Compuserve, and FidoNet. I will rarely provide 
technical assistance over those media because of 
their one-on-one nature, which makes it tough to 
help as many people as possible given the limited 
constraints of time under which I work. Keep that 
in mind, and use the Hertzian Intercept BBS for 
questions and technica] matters that can benefit 
others, оо. 


Here's one other benefit of a public message 
conference such as my BBS: there are times when 
I will either not know the answer to vour 
question, or give an incorrect one. You can bet 
your sweet patooty that someone will jump in 
there with the right answer or a different point of 
view. The result helps all of us. 


None of this is intended to discourage all mail 
contacts. To the contrary, Í conduct much of mv 
business by mail. But more importantly. I really 
appreciate it When people have something to offer 
me by way of new circuits, ups. concepts, ideas, 
etc. The mail is a way for me to keep on top of 
what people are doing. thinking, and discovering. 


My mud box is always open where the conizcts 
and exchanges are mutually beneficial, But when 
benefits are one-way. T have to use the Horjan 
Intercept BBS and other public forums. Picase 
Cooperaie. 


i£ you don't have a computer and modern and 
aren't abnut to get one. for whatever reason. 
you'll not hind me very зутра епс, but at least 
try to ger someone with such facilities to ceniact 
me on vour hehalf if you nced technical help. 


There is yet another way we can communicate: 
computer conferencing! Several amateur computer 
networks provide hundreds of special-interest. 
topical conferences or forums whereby people 
from everywhere and anywhere communicate 
aboul their favorite subjects. 

To access this wonderful medium, you seed only 
a computer, à modem, and ап appropriately 

аб ате BBS эп your area. I wit! tel! vou about 


something in the next few pages that may be more 
valuable to you in the long run than the rest of this 
book. Give it serious thought! 


COMMUNICATING WITH THE HEST OF 
THE WORLD 


As you consider computer Bulletin Board Services 
(BBS's), let me share some inside scoop on a 
massive resource of ideas, information, and 
opinions on hundreds of subjects, including 
scanning and shortwave listening! I hope this 
section motivates you to put a computer on the list 
of tools that support your radio hobby. Jt might 
well become more useful and rewarding than 
some of your radio equipment! 


You may wonder how you managed to play radio 
without a computer. The persona! computer has 
opened doors to all areas of human pursuit thanks 
to automaied information processing, and an 
enormous volume of instantly available data and 
information. 


The five-person office of today does what it took 
fifty to do 25 years ago. Today's serious radio 
hobbyist, armed with a computer and a modem. is 
better prepared for a trontal assault on the 
airwaves than an entire radio intelligence 
detachment in Vietnam! There are many reasons. 
including rapidly advancing technology, but 
ACCESS to information is the focus of this 
argument. 


You see. information exists everywhere. but 
getting to H сар be worse than having your teeih 
pulled with a pair of rusiy pliers. Even public 
libraries. traditional storehouses of information. 
are rarely convenient and accessible at the precise 
moment vou need a bit of data. 


On the other band, a virtual treasure trove of 
information need be no more distant than your 
computer and only seconds away from your eyes 
and mind. 


Consider haw it might take several minutes to 
research а ceriain scanner frequency in Police Call 
and other directories but only a few seconds from 
your computer's memory banks. 


"Okay," vou ask, "a computer is dumb unul it 15 
programmed, so how до 1 get the data in the first 
place?" 

A fair quesuon. There are a number of ways to put 
information into your computer and there's no 
escapim; the fact that the task can iesemoie that of 
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assembling and majntaining a home library of 
books and files. I said "resemble." Actually, it’s a 
lot different in action. requiring much less energy, 
time, space, and cost. 


One of the most effortless and least costly 
resources of information for your computer files 
can be found in that public network of computer 
bulleun board systems called the FidoNet. 


FIDO! 


A few computer nerds. led Бу Tom Jennings in 
1984. started a smal! message network among 
their personal computers. Word of their effort 
spread like wildfire. Their system evolved into а 
world wide network of 8.000 nodes by 1990, 
14.000 in 1992, and over 33.000 participating 
BBS's with dozens in every metropolitan area, as 
of tbis writing. 


FidoNet vaguely resembles Citizens Band and 
amateur radio in the sense that it provides a 
medium through which thousands of people 
communicate with others of like interests across 
сиу, state, country, geographical. and politica] 
borders. and even oceans. all from the comfort of 
the home or office. 


If vou have a telephone line, a computer, a 
modem, and software to run the communication 
link, then the cost to tap into this leviathan 
storehouse of information may be nearly zero. 


You need only log on to any FidoNet BBS to be 
connected into this worldwide network. Tf that 
BBS is within your local calling area, there is 
usually no cost at all. 


You see, the FidoNet is made up of amateur 
BBS's around the world, with almost 19,000 in 
the USA and Canada alone. Amateur? It is 
expressly forbidden to use the FidoNet for 
commercial purposes. 


Therefore, if you can find a Fido BBS in your 
local calling area, chances are you won't have to 
spend a dime to link up with the world! 


FidoNet SysOps are private citizens, and just like 
you and me are very dedicated to their hobby. 
They pay for their computer equipment and phone 
costs just like we dig into our pockets for radio 
equipment. 


Most BBS's have FREE (or low cost) access and 
therefore, through them, you can connect with the 
world without making a major investment. 


ECHO 


Think of FidoNet as a CB radio with over 800 
channels or “Echo Conferences," cach focused on 
some special interest topic. 


One “Echo” in which you will be keenly interested 
is called SCANRADIO, dedicated exclusively to 
VHF-UHF scanning. Another. called 
SHORTWAVE, focuses on Shortwave Listening 
(SWL) and VHF-UHF scanning. 


Other "Echoes" are dedicated to ham radio. 
broadcast radio. satellite TV, kniting, coffee- 
lovers, law. medicine, arts, crafts, etc. There are 
Echoes for religion, politics, adult subjects, 
recreation, travel, computers and, of course, 
hundreds more. 


Those in which we are interested are called 
SCANRADIO and SHORTWAVE. 


No single FidoNet BBS carries all of the (800 or 
more) Echoes, so you might have to explore a few 
BBS's before you find one that has SCANRADIO 
and SHORTWAVE. 


You might not find local BBS's that carry these 
Echoes, but don't despair; you have options. (1) 
call other Fido BBS's in nearby toll areas. If you 
call at night, tolls are lower and less painful to 
your budget, or (2) contact the System Operator 
(SysOp) of each BBS зл your local calling area 
and ask if he/she will carry the SCANRADIO and 
SHORTWAVE Echoes for you, or help you find a 
BBS that does! 


A primary objective of a FidoNet BBS is to carry 
Echoes that appeal to its patrons. The SysOps will 
usually be open-minded to your request. SysOps 
are supportive by definition, and pretty much 
know each other and which Echoes are carried by 
the various BBS's. 


Here is a scenario that shows a working FidoNet 
Echo conference: 


[log into my BBS every moming to read all the 
new shortwave and scanner messages that have 
come in during the preceding 24 hours (typically 
several hundred). When there is a message of 
interest to me, or one that needs my response, I'll 
usually compose my reply on the spot. 


Throughout the day, my BBS electronically sends 
the day's traffic upstream to a "Hub," that in turn 
dumps the traffic from a number of nodes like 

mine further upstream to a “Host” (a server), that 
dumps this greater volume of traffic into a "Star." 
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The Stars then push all that traffic onto a link we 
call the “Backbone,” that connects to the various 
“Servers,” “Hosts,” and “Hubs” and in turn, back 
down to the "Nodes." 


Each Node can be programmed by the SysOp to 
carry just those topics that are of interest to his 
group. In my case, most of the topics are obvious. 


So if I send out a message today, it will circulate 
throughout the worldwide system during the day 
and that night so that everyone who participates in 
the SHORTWAVE or SCANRADIO Echoes will 
see my message the following day or two. 


If a reply 1s made at that time, ГЇЇ probably receive 
itn the next couple of days. 


DON'T WORRY, BE HAPPY 
If it sounds complicated, relax. 


You don't really care how it happens. All you 
have to do is read the daily messages that interest 
you. and respond if and when you want to. It will 
come to vou. after a few sessions, how easv it can 
be to interact with thousands of other radio 
hobbyists. 


You will find people from all walks of life 
participating in the FidoNet conferences. including 
experts, dealers, and vendors, and "Who's Who" 
technical people right down to the greenest 
neophytes They're all welcome! 


Again, relax. Wear any clothes at all – or nothing. 
[i's an inforrnal setting where the newbie and the 
salty expert are on equal footing. Participation in 
the SHORTWAVE/SCANNER Echoes :< а great 
мау to pick up the inside scoop on everything m 
radio, from what's hor and what's not, to hints. 
tips. ticks, and answers to your most profound 
questions about everything from Antennas to Z- 
maichers. 


In addition to the public message system. FidoNet 
also has a semi-private “NetMail” system that lets 
SysOps sena E-Mail between themselves. off to 

ihe side and aw av from the public message areas. 


Many SysOps give their users NetMail privileges 
100: a great service. FidoNers NetMail system is a 
lot like E-Mail in other information services: a 
handy, quick and easy way to communicate wnh 
others on a reasonablv private basis. 

Some SysOps restrict NetMall privileges. making 


it unay ailable on vour BBS. {t's the SvsOp' S 
choice. 


Less known, but extremely potent, is FidoNet's 
informal “library system" called the FREQ or 
“FileREQuest system.” Most BBS's maintain 
large data file storage areas filled with everything 
from freeware and shareware computer programs 
to treasure troves of information on various 
subjects, 


Since radio 1s a hobby and a pursuit of specialized 
interest, most BBS's don't stock radio related 
information in their File Sections unless the 
SysOp is a radio buff like us... 


BUT, there are radio-exclusive specialty BBS's 
around the world that stock hundreds of 
megabytes worth of radio information on everv 
subject you can think of, with product reviews, 
mods, and frequency lists. 


If you Know what to ask for and where it can be 
found, you might get your SysOp to obtain data 
for you using FileREQuest (FREQ). You can also 
get files directly, once you know how. Think of 
this file system às a huge "library" system that can 
be operated right from vour kevboard. 


If vou just сап! find a Fido BBS in your area, 
send us a SASE and a U.S. dollar to defray costs, 
and include your telephone Area Code. We will 
prepare a list of FidoNet BBS's in your Arca 
Code. arranged in telephone number order so vou 
can determine which are local from your phone. lt 
is а good bet that you'll get 10 to 100 or more 
from which to choose! For example. the Michigan 
(313) Area Code has more than 150 Fido BBS's; 
my (619) area code has ever 250! 


This 1Yntroducüon bas only scratched the surface of 
the FidoNet and how it can be used to enhance 
your hobby pleasure ~ the details will appear in 
another book = someday. 


You just have to try it for yourself, You'll see. 
And if you have any trouble. iet me know and ГИ 
{су to smooth the way for you. [n sunvmary. lel 
me just say that the FidoNer and а computer can 
bring a worldwide radio club right onto your 
desktop along with а huge library of help and 
data. 


Every morning, I rise to a steaming cup of fresh 
ground Coiombian Supremo cottee and a 
roundtable discussion with radio enthusiasts 
around the world from The Netherlands, England, 
Germany, Australia, Canada. and all 50 of the 
United States, 


Even as Lawaken. а wealth of info and data lies at 
my fingertips All this апо much more can be at 
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YOUR fingerüps, too! If this doesn't motivate 
you to join the FidoNet Radio Gang, tell me what 
will! 


Did you think Fido is al] we have? 


FidoNet is small potatoes in comparison to the 
behemoth Internet! I'm not going to say much 
about the Internet because if vou know about it. 
you're either all set or (easp/) don't want anything 
to do with it. And, if you don't Know about tt. 
then the Internet is no place for the entry-level 
modemer to launch his first great Adventure. 


You wouldn't start your football career at the 50- 
yard line, in a game between the Dallas Cowboys 
and the San Francisco 49'ers, now would vou? 


The FidoNet is a fine tool for neophytes and 
experts alike — you can quickly learn the ropes, 
and then it provides a level playing field. Start 
there and you’l! go places, and one of those places 
(eventually) might be the Internet. 


THE INFORMATION SUPERHIGHWAY 


It's a popular buzzword, but with little practical 
meaning because the concept 15 so mind-boggling. 
Simply put, the Information Superhighway is the 
path to the Information Age. Its potential impact 
exceeds anything Humankind has yet experienced. 
Now is the time to rev up those data engines... 


Computers, modems, FidoNet. and even the 
Internet are but back-alley tributaries to the street 
that leads to the boulevard that runs into the 
thoroughfare that feeds the Highway. You ain’t 
seen anything yet, Bunky. But here's a teaser: 


It's the best of several worlds. On the roof of my 
shop js a 2' diameter satellite dish antenna that 
focuses into а 0.8dB NF/55dB-gain Low Noise 
Block downconverter. 


Out of the LNB runs 75’ of RG-6 cable into my 
radio and computer lab where it connects to a 
nondescript el-cheapo satellite receiver. That's the 
radio part. 


The special satellite receiver decodes a continuous 
data stream from the G4 satellite and sends it to a 
serial comm port on my computer, where the data 
js processed and made available for use. 


That data stream consists of a wide variety of 
information, from weather maps and forecasts to 
"USA Today" to the latest shareware & freeware 
software to newsgroups from the Internet to all the 
domestic and international message conferences 


from the FidoNet, including the SCANRADIO 
and SHORTWAVE Echoes, and several other 
major networks. 


And that's just one of the many onramps to the 
Highway. 


MASSIVE INFORMATION OVERLOAD 


As а matter of fact, as much as 100 megabytes 
(MB) of data and files come into my system daily. 
Some is radio information, my primary interest. 
Other data relates to computers and computing, 
my sccondary interest. Some data is for my kids 
to use in their school work. 


I can't begin to overstress the value and need for 
computers to keep abreast of all the Jatest in our 
radio hobby! You might think your subscriptions 
to the World Scanner Report and maybe a few 
other magazines like Popular Communications, 
Monitoring Times, and a ham rag or two are 
sufficient. Sorry, my friend, but they are not even 
close to adequate if you take your radio seriously. 


Our minds can only process and store so much 
information before overload pops our circuit 
breakers! 


We need tools with which to process and manage 
ever-growing volumes of dara. The computer and 
a modem are two of those tools! To be perfectly 
blunt about the whole matter, folks, I see an end 
to some paper/printed information in the future. 
Here is one reason why: 


I have 45-50 CD-ROM data disks in my computer 
library which contain things like the entire FCC 
USA frequency database. 


There's more than 70,000 freeware and shareware 
programs, several encyclopedias, history 
reference books. sounds, dictionaries, videos, 
music, fiction and non-fiction books, and other 
huge volumes of information. 


It really is a lot Jike having a city library at my 
fingertips. 


But what to do with it all? 


That's where the computer enters the picture — do 
you see now? A massive library at our fingertips. 
and a method by which to access and correlate 
data from the tiniest piece of information to the 
most voluminous five-dimensional database! 


A public library at your doorstep is one thing, but 
you still have to be able to use it! The personal 
computer offers both the library and the means by 
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which to access it. А medium sackful of CD- 
ROM’s can contain more information than the 
paper in many libraries! 


WHY PAPER? 


The sheer cost of paper, plus the cost of prinung 
and storage, is another reason the Information 
Highway should become next century's 
replacement for paper. Next century? Of course! 
Society doesn't turn on a dime. 


Our present system wil} last weil into the 21* 
century, but mark my words. it wil! change, and 
the changes have already begun! Even now, many 
books are published on CD-ROM, or 
downloadable from online services! Never again 
will I buy а $500 encyclopedia. I have two on 
CD-ROM that cost less than $100 combined. and 
yearly upgrades are a lot less than that! 


When someone asks me a question by mail or 
over a computer network, it might take a lot of 
time to research the information from books and 
papers. 


If that information exists in database format in гау 
CD-ROM library or on my hard drive, I can 
usually have the answer ready within seconds. 


MAKING INFORMATION ACCESSIBLE 


This is a good opportunity to offer not so much a 
critique of the present ¿s a suggestion for the 
future. Let's start putting the meat of certain 
reference books. like frequency directories, on 
computer disk! 


Already in my ibrary are severai books. most out 
of the computer industry, that came with a 
supporting floppy disk! 


Itis high ume met datinfonnation books like The 
Worldwide Aeronautical Communications 
Frequency Directory. Top Secret Registry of US 
Government Radio Frequencies, Police Call. ei 
al.. include а computer database compiling their 
information! 


Here's why: when a certain frequency directory 
appeared for my review in my mail box one day. 
mv first impression was. "Oh no. not aoother 
boek to read" And ulayan mv in basket for 
several davs before í opened it 


Сөт t have TIME io read and research books. Tor 
Pete 5 sake! Wher P need уола, ГАО te 


turn to a disk or CD-ROM, hit a few keys. and 
have it in hand....bzzzzzzzzaaaaaap! Like now! 


Bzzzzzzzzaaaaaap......... the Information Age has 
dawned! Let's step to its beat! Ratttta-tat-tat-tat- 
tat... Ratttta-tat-tat-tat-tat... Get in step or be left 
behind! 


INFORMATION SUPERHIGHWAY AND 
SCANNERS! 


A computer and a modem are about the only way 
we can get together as a group at one time. It is 
being done, folks, and it's the biggest thing since 
radio itself, this computer communication 
business. I don’t have a feel yet for the percentage 
of computerized monitoring posts, but I get a 
steady stream of mail from people who would 
rather fight than switch. 


Every holdout wil} eventually stop holding out — 
and get that computer. But if your computerphobia 
continues after all that I have said, let me invite 
your attention to your VCR, your washing 
machine, your car, your TV and stereo system... 
and YOUR SCANNER. all of which contain 
microcomputers. 


Get real... if you' re holding out for any reason 
aside from religious belief or economic factors. 
then you're not being honest with yourself. Jn 

fact. you're cheating yourself! 


JUNQUE WORKS! 


You can get a clunker on which to sharpen vour 
teeth for $200 or less. I bought an old NCR XT- 
clone with a 40-MB hard drive in late 1921 for 
5200. 


lUs sul] in use ау а controller for my scanners. and 
though it's doubtful anvone would buy it for $50. 
it rans my CE-232 Scanner-Computer Interface 
and PRO-2006 just fine. 


TOO OLD TO LEARN? 
NO! 


You're net too old to ern these new nicks. 
ether, A number of the visitors io my BBS are 
sept- ind octogenarians! One says he's so old he 
doesn t buy green bananas anymore., 


Even if vou don 1 weicome the trouble of learning 
something new. ihe ра of earning computers 


gets to be weirdly pleasant after a while. So, if 
you are holding out, you're missing out — and 
that’s all Г say on thts matter as we drive ahead 
into the Information Age — dodging the roadkiil on 
the Superhighway. 


YES, YOU REALLY NEED A 
COMPUTER! 


Now, the rest of this book is à monoiog. It's me 
talking to you, and youre stuck with that. Bui 
throughout the book there is one message that 
should come across loud and clear. and you're in 
no position to argue. It's simple. 


The computer age 1s here, апа computers are an 
integral part of communication, and of the systems 
that achieve it. That includes your scanner, folks. 
Remember, at the other end there's a transmitter, 
and sure as shootin’ it s either got computerized 
controls or is somehow managed with a computer 
interface. 


Scanner Queen? 
Behind every great man there's a woman... in this case, holding a 
microphone. This, my friends, is Cindy! 
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It's time. Stop waiting for prices to come down. 
Get that computer. buy that modem, and get into 
the circuit, for two reasons. First. you will get 
better information, and more of it, and on a more 
umely basis, if you use the BBSs and other media 
that are available to you only with a computer. 


Second. there's ihe ие matter of whether or not 
you would enjoy having an Ultimate Scanner... 
Throughout this book vou'll read the same 
message. over and over. 


А CRITICAL PART OF EVERY 
ULTIMATE SCANNER 
IS А COMPUTER! 


Ladies and Gentlemen, bite the bullet and start 
your computers! Without one you'll have to 
compromise, because – by definition – the 
Ultimate Scanner includes a computer... 


Hold on, now. When I tell you, you might not 
like the answer. It will possess enough of the 
following qualities to make your blood run cold 
and give vour spouse a nasty disposition: 


1. Goshawful costly — 5 figures, at least 
2. Humonguously huge - 8-cu ft and up 
3. Monstrously heavy — 100-10 plus 


4. Butt-ugly - if your dog looked that bad, you'd 
shave his butt and teach ‘im to walk backwards 


5. Obnoxiously smelly - please don't ask 


Really, you should determine for yourself the 
commodities, features, benefits, capabilities, 
looks, size, and economics that would, if you had 
them in your scanner, make life exceed your 
fondest dreams. Well, fantasies are over. so make 
a real-world list of the things you’ve only wished 
for in your scanner. When you can’t add to that 
list anymore, you will have laid the groundwork 
for the Ultimate Scanner. The next step is to arm 


[S AN ULTIMATE 


SCANNER? 


yourself with my first two Scanner Modification 
Handbooks and perhaps the World Scanner 
Report. These publications wili give you the 
warm-up exercises and preliminaries that it takes 
to go for the gusto. 


But, yeah, I know... you want to learn what I 
think it takes to make up the Ultimate Scanner. 
First, vou have to understand that it doesn't matter 
to me how costly, huge, heavy, ugly, and/or 
smelly it is. Those are incidental characteristics 
that have nothing to do with performance, and 
aren't factored into the equation when I set a goal. 
Performance and functionality count. Nothing else 
does. 


You want the meanest, nastiest, most formidable 
scanner around? The one with the biggest teeth? I 
can assure you it's going to be big and ugly. For 
practical reasons, though, we will minimize the 
weight, cost, smell, and bad habits. Here are a 
few of the functionalities and features I demand of 
my front-line scanner. 
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COMPUTER CONTROL 


[ used to be good at hand-programming mv PRO- 
2004 with its smooth, sloped. tactile-feedback 
keypad. I could get 400 channels programmed and 
running after only two or three hours” work, 
Sometimes. though, і made a mistake back in the 
first 40 channels and skipped an important 
frequency that belonged only there, (Gloom!) This 
forced me to choose between repeating the effort 
ot accepting a flawed program Nasty? Sure, but 
the alternative i5 to take enough time to avoid 
mistakes in the first place... Hours! 


Yo! Hey! Scanning 1s supposed to be fun. right? 
Well, in this day and age. scanners with more than 
50 channels that lack computer control are like 
outdoor potties, with corncobs. and Rears & 
Sawbuck catalogs. There's absolutely no excuse 
tor such designs. but of the 400+ scanners 
produced to date. only a few have any excuse for 
a computer control port the AR-3000, АК-25 15. 
AR-2500, TR-4300. and MR-8 100 and none of 
(Nese are what [ would call “good” computer 
control... they re more like afterthoughts. Each 
And every one of which Fam aware has 
delictencies m the Implementation of the port or 
the accompanying software or both. | guess 

they "re better than nothing. though... and at least 
(hose manufacturers tried. In many instances of 
computer-controlled radios. especially shortwave 
and ham, software is not included. period. Yup, 
out goes another $50-$500 for the software you 
absolutely gotta have. 


| up mv hat to Electra Bearcat for their early 80% 
ertort with the CompuScan 2100 (E think it was 
calla: PF aever had one and 1 don t think it sti ed 
en te Market very long. but that contrapon wes 
designed irom the ground up as а campuier- 
controlled scanner. [belese it required s 
Commodore 64 (o ran tt. Now ihere is à surge uf 
interest in this old clunker around the compute: 
networks as hobbs ists try to buy one. H sou have 
one. there is a market for it. 


Laden s only answer to the CompuScan after 
they bought out Electra Beareat was the MR-8100 
of à few vears ago, Tt was designed more for the 
conimercral market Where apparently n wis as | 
warmly received as Mies ata wedding. So the MR- 
8100 was dumped onto the hebbs market where ii 
generated litle adrenaline. 

The problem with the current crop of commuter: 
mierfaced radios is that they don't do anything 
much right out of the box except make you wish 


for тоте. As soon us you spend more money on 
hardware and software, (hen things start to 
happen... magically. Beware, what works with 
one interface on one radio might blow something 
up in another. Scanners are a different breed 
altogether. For ihe most part. 1f you want to 
interface one of the more popular scanners to д 
computer, it's going to tàke a 3rd party add-on 
package. of which several ere How ing around. 
Again. there's nothing compatiote Getween them 
and they vary as night and day in what thes can do 
and how they do it. This book is going to dedicate 
some space to showing how and what a compuler- 
scanner interface should do. It's time for the 
manufacturers to wake up and give us what we 
want: a meaningful relauonship (hetween the 
scanner and the computer). 


ELEMENTARY INTERFACING 


Ata minimum, a computer mtertace should be 
able to AutoProgram the scanners memory 
channels from a plain ASCI text file with the 
simplest of software. No proprietary formats: no 
sophisticated database managers: and yet the plain 
ASCII file should be in such a format as to be 
easily generated and read (exported and imported) 
by most апу database manager or text editor, 
sophisticated or not. We're talking about a public- 
domain file format called “comma-delimited 
ASCII.” Here is an example of the instruction that 
will program three channels of the PRO-2004/5/6 
with the CE-232 Scanner/Computer Interface: 


.38,158.970,nfm.D.L, 
,39.158.970,am.D. . 
‹40,15&.970. міт. „L, 


Ix ans thing there hará 10 understand? The first text 
рве loads Chanel 38 with the frequency 158,970 
M2. sets ihe NFM mode. sets the Delay 
funcion, and LocksOut the channel... the same 
program functions appear on the keyboard of the 
scanner! The second Ime Joes the same thing for 
channet 39. 2acept selects the AM mode and does 
not Lock Ou. the channel The third line repeats the 
process l'or channe! 40. but it seis Ше WEM mace 
without Delay. and LocksOut the channel. For 
дейш» on Uis jwe subject go to Chapter 8. 


This was intended io give vou a basic idea of how 
uncomplicated a computer interfaces operation 
сап be; black magie incantations are usually nat 
required. A dead chicken at midnight might help a 
little bit, maybe... 


What /5 an Ultimate Scanner? 


A computer interface for the Ultimate Scanner 
should also be able to read data from the scanner 
and pass it to the computer for processing. In 
other words, a two-way street. The data generated 
by the scanner should consist. at Jeast, of each 
variable that appears in the scanner’s display: 
Channel, Frequency, custom settings of Delay. 
Lockout, Mode, Bank. etc., as well as Date, 
Time, and Duration of the logging. In other 
words, the computer interface should be able to 
AutoLog data from the scanner, and the computer 
should be equipped with a simple but powerful 
program to perform the task. I could go on and on 
here, but you get the idea....? Today’s scanners 
need to be controllable from a computer, and the 
computer needs to be controlled... by you. So bite 
that bullet! 


You've read a lot of accusations from me — 
pointing out the absence of computer competence 
and courage of some of my readers. If the shoe 
fits, wear it. Jf you're already aboard, however. 
think back to when you finally took that leap and 
bought your first TRS-80 (Level Т) ~ and have 
pity on those I’m goading into taking the same 
step. 


PROGRAMMABLE MEMORY 


The Ultimate Scanner will have programmable 
memory channels; a lot of them. 400 is an 
absolute minimum and 1,000 isn't too many. Say 
what? Well, in San Diego County, where I make 
my home, I have identified over 20,000 active 
frequencies between 500 KHz and 1300 MHz. If 
your scanner 1s equipped with a computer 
interface, the number of memory channe!s is less 
important, but I still call 1,000 a minimum. 
Programming, whether by hand or by computer, 
isn't something you want to spend a lot of ume 
doing, right? So the more memory channels in 
your scanner, the less programming you'll have to 
do. My TurboWhoppers are configured with 
25,600 programmable channels. You'll see why 
(and how) Jater in this book. 


Scanner memory bank organization is also 
important, but manufacturers just haven't caught 
on yet. The new PRO-2035 comes with 1.000 
channels organized into ten banks of 100 each. 
Ridiculous! The 2,016 channels in the TR-4500 
are organized into 62 banks: that's much better. 
Frankly, the Ultimate Scanner should have 1,000 
channels organized as 100 banks of ten channels 
each. Don't hold vour breath, though. Scan and 
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Search banks are controlled by the firmware іп the 
CPU. which we can't alter. or even access. We 
can’t do much about that, but the manufacturers 
can sf we make enough noise. 


The primary advantages of my 6.400 channel and 
25,600 channel Extended Memory Mods is not the 
number of channels; rather. it is the flexibility of 
programming and organization. My 6,400-channel 
mods offer 16 blocks of 400 channels each, with 
160 banks of 40 channels each. Mv 25.600- 
channel mods offer 64 blocks of 400 channels 
each. with 640 banks of 40 channels each. The 
number of organizational sub-levels between total 
number of channels in a scanner and each 
individual channel is an important logical 
separation to the human mind. Radio Shack's 
PRO-2035 with its 1,000 channels, 10 banks with 
100 channels per bank is an operational failure. 
The PRO-2035's human interface 15 extremely 
dysfunctional, inefficient, and unfun. 


The Ultimate Scanner s memory should be 
organized as 1,000 channels, 100 banks. 10 
superbanks. ! channel steps. See the 10:1 
progression there? Because we have ten fingers to 
count on, we think and operate in decimal! The 
human mind is more efficient with such an 
organization to assist it. Mine is, anyway. How 
many fingers do vou have? 


KEYBOARD 


Neither before nor after the PRO-2004 has there 
been a truly efficient kevboard. | thought the 
PRO-2005 and PRO-2006 keyboards were the 
utter pits until the PRO-2035 appeared with its 
keys haphazardly strewn all over the front panel. 
The sloping, tactile keypad of the PRO-2004 is the 
closest example of the keyboard that will appear 
on our Ultimate Scanner. 


Manufacturers should pay а kinesthesiologist to 
design keyboards: someone who knows how the 
human wrist and fingers are constructed. For 
whatever it is worth to you dear Readers – my 
front-line TurboWhopper scanner is a PRO-2004. 
thanks partly to the efficient, visible, accessible 
keyboard, plus the next two qualities to be 
discussed. 


METERS 


S-meters (signal strength meters) belong on radios 
like gas gauges belong on cars, Most ham, CB. 
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and shortwave radios come with S-meters: most 
scanners do not. | haven't the foggiest idea why 
not. so don t ask. But it sure wouldn't hurt to give 
your favorite scanner manulacturer a piece of your 
mind about the subject. Once again, here we have 
a bit of evidence that scanner manufacturers think 
we are stupid and don't know an S-meter from an 
odometer. Listen up: the single most important 
too! in my monitoring tactics aside from the 
receiver itself, is the S-meter. | wouldn't be 
without one! Гуе gone so far as to make S-meters 
for my handheld scanners! Let's look at a typical 
S-meter: 


An S-meter is usually calibrated with markings 
similar to those shown. The markings between 0 
and 9 are referred to as "S-units." while the marks 
above 9 are said to be “decibels above S-9." Each 
S-unit is usually scaled to be about 6 dB and S-9 
is a reference, usually 100 uV, or sometimes 50 
uV. This scheme of calibration and the associated 
markings aren't too important in the great scheme 
of things and we shall not dwell upon them at any 
greater lengih here. Instead. here is WHY an S- 
meter is important to the compleat scannist and 
The Ultimate Scanner: 


In à word, an S-meter is an indicator of the 
relative strength of the incoming signal. after it has 
been processed Бү the receiver. Therefore. the S- 
meter can be used to evaluate the performance of 
the receiver, the coaxial cable. and even the 
antenna! Do you ever wonder if your antenna 15 
working up to par? Without an S-meter, you may 
never know. 


The predominant characteristic of an FM signal is 
clarity of the signal and lack of background noise. 
Basically, all VHF-UHF signals that register 
between | and 30 on the above S-meter will sound 
about the same. This is in stark contrast to AM 


and SSB modes where clarity suffers and noise 
increases with weaker signals. You can t usually 
tel] by ear, therefore, how well vour receiver site 
is performing in the VHF-UHF bands because if 
the signal is received and demodulated. it will 
sound OK. With an S-meter, you can tell much 
more, and in a flash! 


AN S-METER CAN CHECK THE 
WHOLE SYSTEM! 


Suppose your present antenna is rusty, decrepit. 
and falling apart, but seems to be working okay. 
First, you monitor a NOAA weather station; 
maybe a couple of low band stations, a 450 MHz 
station, and several in the 800-1300 MHz range, 
writing down the S-meter reading of each. Now 
you put up your new antenna; run the same checks 
and measurements and the S-meter will tell you at 
a glance if there was improvement. Suppose the 
NOAA station registered S-8 before the change of 
antennas and halfway between S-8 and S-9 after. 
then you KNOW there was an improvement, and 
even if the station really sounds the same you'll 
soon see why the improvement is important. 


The same principle applies when you change the 
coax cable: any differences will be visible. With 
some experience under your belt, you'll realize 
how the slightest physical changes in your station 
can make big differences in its performance. But 
now get this: you may hear no difference between 
$-8 and S-9 signals. nor between 5-2 and S-3. 


But if you do an improvement to boost an S-2 
signal up to S-3, then signals that were previously 
below the threshold of detection at 5-0 will be 
audible, loud and clear, at S-1. You just never 
know what you're missing unti) you make an 
improvement and hear things that were never there 
before. An S-meter affords a cheap and easy tool 
by which to evaluate your station's performance. 
But there's more! 


It will also detect changes made at the remote 
transmitter. It will show how weather and seasons 
can affect radio transmission path characteristics. 
Ап S-meter is a sensory input from the world “ош 
there" that helps personalize those cold, sterile, 
antiseptic signals. 


Look at it this way: it takes all five human senses 
to get a good feel for an object or event, and a 
sixth sense doesn't hurt any. Radio affects only 
the auditory sense. The more sensors you have, 
the more personality and information wil) be 
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found in the detected signals. An S-meter is a vital 
sensor for your monitoring warbag, and the more 
you use it, the more uses you'll discover for it 
than I have the time and space to tell you about 
here. The Ultimate Scanner must have an S-meter, 
no question about it. Catch-22 is that most 
scanners don't come with ‘em and only a few can 
be easily modified for an S-meter: they include the 
PRO-2004/5/6, PRO-43, and the new PRO-2035. 
Methods will be provided later for these and other 
scanners. 


SHIELDING 


Proper shielding is 3mportant to the compleat 
scannist now, but hopefully not in the future, 
Here's what I mean. АП radios employ oscillators 
that can (and do) emit some of their energy as 
radio waves that escape the circuit board and pass 
through plastic cases. They're received by the 
antenna as self-interference, and as signals by the 
receivers of scanner-cops who might be passing 
through your neighborhood. 


DETECTING A SCANNER 


Preposterous, you say? Whoever heard of 
scanner-cops? Yeah... right... well... anyway, 
the PRO-2004 was the last of the first-rate 
scanners 10 employ an all-metal case. When a 
metal case is connected to a True Earth Ground, 
shielding can be very effective, with minimal or 
no interference to adjacent receivers and less or no 
chance of detection by scanner cops who might be 
looking for contraband receivers. Yeah... right... 
well... anyway, the PRO-2005, 2006, and 2035 
successors have plastic cases through which RF 
emissions pass like water through a strainer. Most 
scanners now have plastic cases that make the unit 
much like à radio beacon, and does anyone really 
need to know you own a scanner? And if they 
think they do, would you want to advertise yours 
to them? 


Gun owners don't put signs in their front lawns 
announcing the fact. Guns and scanners seem to 
have a lot in common these days, both from the 
perspective of governments as well as owners. Let 
me tell you a short story about governments, 
receivers, and citizens... 


A country about 3,000 miles east of ours felt its 
citizens should beg permission to own and operate 
TV receivers and pay a stiff fee for the privilege. 
Some citizens disagreed, and failed to acquire the 
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necessary permits. Not to be outdone and to 
collect bis due, Caesar patrolled neigbborhoods 
with sensitive detection equipment and identified 
homes where television receivers were being 
operated. 


A check of license records identified those 
registered, with fees paid, and those which were 
not. Arrests were made; cnminals created; and 
moneys collected or TV's confiscated. This really 
happened. and in a so-called free country, no less. 
You can only imagine, then, what things are like 
in not-so-free countries. 


Well, if it ever becomes illegal to own a scanner in 
this country, you will have to either junk yours or 
ensure that all your receiving equipment is well 
shielded. You say it can't happen? Well, J say that 
government’s first step is to limit their use. And 
that, fellow citizens, has already happened! 


MECHANICAL ISSUES 


Space and physical construction are very 
important to the contenders for the Ultimate 
Scanner. First, you have to accept as a given that 
no manufacturer will ever produce the Ultimate 
Scanner; only YOU will ever come close. 
Therefore, it is vital that your contender have a 
strong chassis with plenty of "real estate" on 
which to romp, stomp, hack, and stack things. 


The PRO-2004 is a good example of this 
ruggedness; it has plenty of room in which to 
work. The PRO-2005 and PRO-2006 have 
adequate real estate, especially when the AC 
power supply is shifted to an external module, but 
they are neither as spacious nor as rugged as the 
PRO-2004. I have to underscore something about 
the PRO-2035: thanks to its microelectronics, 
there's almost enough real estate for a tennis 
match. Some of that comes at the expense of 
ruggedness, though. The metal frame is thinner 
and the plastic case weaker than its predecessors. 
Sull. it will do... especially if you shield the case. 


SPECIFICATIONS & PERFORMANCE 


Performance of the Ultimate Scanner is hard to 
quantify by the hobbyist, because measurements 
at УНЕ and UHF frequencies cannot be made 
with your basic garden variety yardstick and DC 
voltmeter. If you buy a two-pound beefsteak, you 
can always take it home and weigh it to see if you 


| got what you paid for. Therefore, instead of 
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spouting a bunch of numbers that may or may not 
mean anything. and can't be proved by the casual 
hobbyist, I'll fist some of the tangibles that should 
be otfered by the ‘engine’ of your beast. Some of 
these "tangibles" will be self-evident in published 
specs or in catalog descriptions, while others will 
have to be verified or determined using the service 
manua) and instruments, or even by physical 
inspection. 


TERMS 


As this continues, you may encounter terms that 
are a bit alien. To reduce the number of queries on 
my BBS, I’ve put a glossary at the end of this 
book. To keep the book cost-effective, I’ve made 
that glossary modest. If you get stuck, remember: 
virtually every library has a technical dictionary... 


FUNCTIONALITY AND FEATURES 


Here are most of the things I demand in the 
Ultimate Scanner, and you should. too! 


Bandpass filters in the RF preamplifier section 
(the more, the better) help reduce interference 
from bands other than the one in current use. The 
PRO-2004/5/6 series has seven bandpass filters: 
25-40. 40-68, 68-108, 108-174. 174-280. 280- 
520, and 760-1300 MHz. That's one reason these 
scanners work so well. 


Low-noise, high gain RF preamplifier section: 
hard to put a finger on, but a sensitivity spec of 
0.5LV to produce 10 dB of “quieting” is fine. See 
the units specifications. 


RF and IF Automatic Gain Control (AGC): hard 
to determine by measuring, but the service manual 
wil} tell. 


Triple conversion superheterodyne, phase-locked- 
loop (PLL) controlled; usually found in the specs, 
though the term might be “triple-conversion 
synthesized," or something like that. This is 
critical to both sensitivity and the reduction of 
unwanted “birdies,” 


Double-balanced mixer between preamp and Ist 
IF section: identify in schematic. 


Double balanced or balanced mixer between 151 
and 2nd IF sections; identify in schematic. 


Temperature Compensated Crystal Reference 
Oscillator (TCXO), identify in service manual. 


Speed: 25-ch/sec scan: 50-steps/sec search. 
minimum; usually in the specifications. 


Crystal or ceramic filters in each JF section: 
identify in schematic. Important because good 
filters pass desired signals. and block undesired 
ones. 


Separate final IF sections for each of NFM, 
WFM. and AM modes: identify in service manual. 


IF-derived SQUELCH and CPU-generated audio 
MUTE functions: identify in service manual. 


The PRO-2004, PRO-2005. PRO-2006, and 
PRO-2035 generally meet these rigorous specs. 
Now we'll get into external conirols and features, 
the most surely needed of which are: 


User selectable controls for MODE (NFM, WFM, 
and AM); Search Steps (5. 12.5, 50 kHz). 


Tape recorder output jack. 


Automatic Tape Recorder Switch output jack 
(Carrier Operated Relay). 


External DC power input jack. 
External speaker jack. 
Headphones Jack. 


Sound Squelch function: PRO-2004/5/6 and PRO- 
2035 only. 


Center Tuning Indicator. See MOD-27 in my 
book, Scanner Modification Manual, Vol-2. 
Hereafter, if I just refer to Vol-1 and Vol-2, you'll 
know what I mean, right? 


S-meter: MODs 25 and 26, Vol-2. 

Data/Tone Squelch function: Chapter 6. 
Adjustable (0-15 sec) Delay: MOD-29, Vol-2. 
SSB Detector or BFO. 


Programmable (per channel) RF attenuator in 
antenna circuit. 


Programmable (per channel) CTCSS and DCS. 


Manual tuning contro! ~ all displayed frequencies: 
PRO-2035. 


Panel Lamp On/Dim/Off control. 


The PRO-2004/5/6 and PRO-2035 meet the above 
minimums, or can be retrofitted (sometimes with 
modifications) to meet most of these needs. 


There are exceptions. 
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FLOPPY DRIVE (?!?!) 


I can go on and on, adding things and 
afterthoughts. Like, fer instance... why don't 
manufacturers add floppy disk drives to their 
better scanners? This would reduce the need to 
design high performance computer interfaces for 
the scanner, and и would definitely improve 
customer satisfaction. A disk drive doesn’t cost 
much... $20 at the OEM-level. maybe? I'd happily 
pay $50 more for a scanner equipped with a 
floppy drive, especially if the disk could be read 
and the program files prepared by my computer. 


"AutoProgramming" could and should be kept 
simple with basic delimited ASCII text to afford 
maximum compaubility among Apple, Atari, 
Commodore, and PC/compatible computers. With 
Commodore and Atar: dropping from the scene. 
the compatibility issue for Macintosh and 
IBM/clones is the primary concern. No problemo 
in today's technology, when vou consider those 
goofy LCD electronic typewriters with floppy disk 
drives for around S400. 


So why can't we get a $400 scanner with a drive? 
I'll tell you why not... manufacturers think we 
don't know a floppy drive from a Sunday drive. 
Scanners are used mostly by ‘Joe Consumer 
hobbyists. Product demands from the business 
market seem to get more attention than consumer 
demands. Manulacturers employ professtonal 
marketers to talk and üsten to the business 
community. but they rarely listen to consumers 
and hobbyists. We're stupid. remember? 


I dream of a floppy drive in my Ulumate Scanner. 
but ГЇЇ be dreaming until hell freezes over because 
T don’t know how to retrofit one. I do know how 
to fit a darned good computer interface to a few 
scanners, so this book has some reality to munch 
on rather than just whimsical wishes. 


Frankly. I don't know HOW to get the attention of 


those dang manufacturers, and if I can't. vou 
probably can't either. Therefore... we have to 
hack. cut, and chop our way into our scanners to 
make of them what we want No one else is going 
to do it for us. Tf vou can accept that. then you're 
à hacker. 


SPECTRUM ANALYSIS 


So. what else? A spectrum analyzer. maybe? 
Remember where I said we'd pay little attention to 
cost? Here's where we pay serious adention. 
Look at the $6.900 price tag on ІСОМ `< R-9000 


25 


receiver with spectrum analyzer (SA). Sounds 
expensive? Well, once you look at the menu, it 
will seem cheap! 


A spectrum analyzer can be important, depending 
on what the hobbyist is trying to do. This function 
is critical to the National Security Agency, and 
Fort Meade (MD) is loaded with them. 


A spectrum analyzer provides a display of all 
received signals that comply with the operator's 
setup instructions. If you tell the SA to operate at 
500 MHz +10 MHz, it will display every detected 
signal from 490 to 510 MHz. with their relative 
signal strength. Useful? Depending on what you 
wish to do. it can be. 


Some SAs are stand-alone instruments (Hewlett 
Packard. for instance, makes instruments at $50K 
or more), and others are configured as а card thai 
fits within vour PC and uses vour PC for 
compuling power and its monitor as a display. 


USEFUL SAs 


Grove Enterprises’ add-on SDU-100 Spectrum 
Display Unit at -$500 and up, with options, sets 
the bottom price in this field. Spectrum analysis 
Just hasn't lit any fires on the hobby radio scene 
yet. most likely because of the cost: any decent SA 
is expensive. 


The Uitimate Scanner can be configured with or 
for a spectrum analvzer, but such instruments are 
so pricey that ГЇ condense this topic till the 
numbers reach the hobby level. For those sull 
interested in the function. at least four products 
fall more or less within the hobbyist's grasp. 


Three of the four provide only modest 
performance. but might be suitable ror those who 
insist on having «ome sort of spectrum display 
capability but want to conserve money. The fourth 
one offers serious quality. but at a price of 
S1,000-$3.000. depending on desired options. 


You have to look long and hard at the idea of 
sticking а $3000 SA on a $400 scanner station. 
but a few potentially useful and “low-priced” 
resources are as follows: 


Grove SDU-100 


Grove Enterprises 

PO Box 98 

Brasstown, NC 28902-0098 
(704) 837-9200 


Poor Man's Spectrum Analyzer 


Science Workshop 
PO Box 310 
Bethpage, NY 11714 
(516) 731-7628 


450 MHz Spectrum Analyzer 


А & A Engineering 

2521 W. LaPalma; Unit K 
Anaheim, CA 92801 
(714) 952-2114 


ITC SA500A Spectrum Analyzer 


Advantage Instruments Corp. 

3817 S. Carson St. 4818 

Carson, City, NV 89701 

(702) 885-0234 Fax: (702) 885-7600 


BUYERS BEWARE: Such spectrum analyzers 
may or may not work with à given scanner or 
system configuration, and the buyer should learn a 
lot before making an investment. Contact the 
vendor' s sales engineers to determine whether а 
product meets your needs and expectations. 


DECODING — DECRYPTION 
CIRCUITRY AND SOFTWARE 


Decrypuon of encrypted signals should be within 
the capability of the Ultimate Scanner. but the 
Electronics Communicauons Privacy Act of 1986 
slaps the quietus on this subject. 


[tis agamst the law to decode coded signals unless 
those signals are to YOU, or vou have pernnssion 
by the sender to decode them. Yes. І know. vou 
aren't the first to ask “How do f£ Know it a signal 
is mtended for me unless 1 first check it out?" I 
can t answer that, and 1 don t know how a judge 
would answer it; | can't afford а lawyer who 
might be wrong. and Fin not excited about finding 
out the hard way. 


Besides. most signal eneryption schemes fall into 
one of two categories. The first. called speech 

(n version, is so casy to decode that no one who 
truly needs security uses if anymore. The other. 
based upon some derivative of the infamous 
Digital Encryption Standard (DES). is mgh 
impossible to decrypt unless vou can (ind some 
Specialized Russian equipment on the surplus 
market. Because of the law and the extreme 
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difficulty of cryptanalysis and decryption, we'll 
not deal with the topic. But if you insist, you can 
find plenty of accessory equipment and software 
that will help you do it. Just check out the 
magazines that support our hobby. 


At your own risk. 


CONTINUOUS COVERAGE 


The Ultimate Scanner should cover most of the 
range from 25 MHz to 1300 MHz, with no breaks 
at all. Unfortunately, a combination of the [aw and 
technology make this an increasingly touchy 
subject. My favorite scanners, the PRO-2004, 
PRO-2005, PRO-2006, and PRO-2035 have threc 
segments deliberately deleted from the ideal 
continuous coverage: 


520 to 760 MHz UHF Television Band 
824 to 851 MHz Cellular Mobile Band 
$69 to 896 MHz Cellular Base Band 


It just happens that the 1st IF and PLL circuits use 
frequencies in the 520-760 MHz band. so even if 
reception were not blocked, that band would be 
unusable because of excessive spurious and 
"birdie" emissions. 

Admittedly, I like to snoop around in this band 
because [ suspect “bugs” and other clandestine 
signals can be found among those few and far 
between UHF TV channels. Why not? There are 
very few receivers that can access this no-man's 
band so I figure its an attractive one to shady 
operatives and sensitive situations where discreet, 
short range. low power links are desired. Lin 
right, bx the way. 


A UHF TV receiver would not ordinarily detect 
these kinds of signals if care were exercised to 
transmit well away from active segments of the 
band. and separated from the standard audio 
carrier slots. Its simple to avoid detection 
between 520-760 MHz! 


Some scanners cain receive the UHF-TV band. but 
are known to be deficient m general perlormance 
and хо 1 do net consider them contenders for our 
Ultimate Scanner. 


You are, of course. free to do your own 
considering; you'll get no argument from me. It’s 
just that chose “other” scanners do not perform up 
to certain standards, and/or cannot be retrofitted 
with some of the modifications that are required to 
achieve Ultimate Scanner status. 
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The other two deliberately blocked bands 
(common to most 800 MHz scanners today) are 
the cellular mobile telephone (CMT) bands, 
detection of which is forbidden by the ECPA of 
1986 and other legislation. The PRO-2004. PRO- 
2005, and PRO-2006, as well as a number of 
other scanners, are celluiar-capable. despite the 
deliberate blocking of those bands at the factory. 
Clip a diode and vou can listen to your favorite 
stockbroker or drug peddler. 


Unfortunately, the federal Telephone Disclosure 
and Dispute Resolution Act (TDDRA) of 1994 
(Public Law 102-556) forbids the importation and 
manufacture of receivers that can receive the CMT 
bands. Also forbidden are reccivers that can be 
"easily retrofitted" to receive cellular signals! No 
more snip-a-diode/clip-a-resistor cellular-capable 
scanners for us. folks. In fact. the PRO-2035 is 
the first of the Ultimate Scanner contenders to hit 
the market that js nor cellular capable. As І 
understand it. ICOM’s world class receivers have 
the entire 800 MHz band permanently blocked. 
You won't even be able to monitor trunked 
transmissions! 

Therefore, the ultimate contenders for Ultimate 
Scanner status may very well be limited to the 
PRO-2004. PRO-2005, and PRO-2006. if CMT 
capability is on your list of important criteria. Not 
that the so-called world class receivers were ever 
contenders in the first place... they are not, in my 
opinion. simply because they are NOT scanners! 
While most will "scan" a limited number of 
channels at some slow speed. they do not have the 
features and performance required of a tue 
"scanner." Receivers by ICOM. Kenwood. und 
Yaesu are formidable, but they are not scanners 
and won't bc treated at any length in this book. 


CONTINUOUS TONE CODED SQUELCH 
SYSTEMS (CTCSS) 


CTCSS was covered in Volume 2 of my Scanner 
Modification Handbook. W's simply a means by 
which a transmitred signal can control its own 
reception in properly equipped receivers. A special 
audio tone is added to a transmitted signa), and 
upon detection by the receiver the squelch is 
opened to allow the transmission to be heard. 


CTCSS dwells in the off-center spotlight but 
certainly should have a place in the Ultimate 
Scanner, if it is practical to add it, CTCSS is not 
easily impiemented as an add-on by the casual 
hobbyist hecause the required ICs have not Deen 


developed for the after-market hobbyist. I have 
seen a few CTCSS products come and go, so if 
you’re serious about this perhaps the components 
you need wil] be available. And perhaps not. 


The only scanner radios (of which I am aware) 
that corne factory or optionally equipped for 
CTCSS are the not-very-exciting Uniden BC- 
760XLT and BC-8500XLT. Radio Shack’s 1995 
catalog introduces a clone of the BC-8500XLT 
called the PRO-2036, which offers an optional 
CTCSS decoder. 


Communications Specialists, Inc., at (800) 854- 
0547. is the foremost source of CTCSS products 
and expertise — you should contact them for the 
latest information. The model TS-32P CTCSS 
Tone Decoder & Encoder remains state of the art, 
and can be programmed by external addressing. If 
we spent serious time with it, ]' m sure ways could 
bc developed to incorporate CTCSS programming 
on a per-channel basis for the Ultimate Scanner. 
Again, the TS-32P module would be the heart of 
the project and only an external memory design 
would be required to implement it on a per- 
channel basis. 


Some of you enterprising CE-232 Interface 
aficionados might contrive a way to let the 
computer do all this work for you. T'I} have to 
Jeave this subject fer another time, though, 
because there really isn't anything much new. Call 
Communications Specialists, Inc.. for the iatest 
technical scoop on CTCSS and stav tuned to the 
World Scanner Report for implementation news. 


To a scannist. CTCSS js not very useful. You 
see, the technique was invented by professionals 
in the Land Mobile Radio services who didn't 
want to be bothered by апу transmission unless x 
was aimed specifically at them. Today's two-way 
handheld radios include CTCSS so people don't 
have to listen to everything. but that’s not the way 
itis in the scanning hobby. 


Scannists generally want to hear fleas arguing 
over turf on a junkyard dog two counties over. 
For that reason. we dabble with CTCSS because 
is an intriguing technology, but when a Decoder 
is added you hear LESS. not MORE. After à 
while, the sound of silence gets on your nerves 
and off goes the CTCSS... 


DTMF 


There are other sideshows down Ultimate Scanner 
highway that could take a haif а book or more if I 
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focused upon them. Take DTMF, the tone set 
used by your telephone. We hear DTMF tones on 
our scanners and someumes wish we could 
decode them into numbers. DTMF decoders are 
advertised in the various radio magazines, but 
they're external add-ons, not an intrinsic part of 
the scanner. 


The World Scanner Report featured a do-it- 
yourself DTMF decoder project in one of its back 
issues (the one that was discussed in Vol-2). 


Speaking of which. HB Technologies (Spring 
Valley, CA), developers of the HB-16 DTMF 
Decoder. went out of business and gave us 
permission to print their HB-16 DTMF Decoder 
plans in the World Scanner Report. So check 
Monitoring Times and Popular Communications 
magazines for DTMF decoder ads; else roll your 
own. À nice concept, DTMF decoding. but 
definitely a sideshow, and definitely an add-on 
rather than an integrated scanner function. At least 
for now... 


RECEIVING SIGNALS GENERATED 
22,500 MILES AWAY 


How about satellite reception? Sure, the Ultimate 
Scanner might be capable of satellite reception. but 
this is a specialized field that takes specialized 
tools and techniques. 


There are several distinctly different kinds of 
satellite signals. each requiring ns own strategy 
tor detection, and none have become prominent on 
the hobby scene except for TVRO (TeleVision 
Receive Only). But excuse me... І don't watch 
television, and scanners can't receive C and Ku 
band signals anyway. For now. satellite 
commanication is at relauvely low power. and in 
bands that scanners cannot generally reach. 


There's a lot of communication using high-power 
L-band, between 1.4 and 1.6 GHz, which a few 
receivers can hear directly or with a simple 
downconverter, and some new mobile satcom 
terminals. As examples, INMARSAT and the 
Wesunghouse MET ure using that range, but most 
of that is ordinary telephone conversations by 
people who can afford a private portable satcom 
terminal. Boring, right? 


There's another sort of satellite communication 
you can hear if you already own а TVRO receiver 
and a satellite dish. This specialized mode ot 


satcom that requires no modification to the scanner 


is called SCPC (Single Channel Per Carrier), а 


method of packing upwards of a couple thousand 
voice or narrow band data channels into a single 
satellite transponder. Some long distance 
telephone carriers and corporations use SCPC as а 
low cost means of bypassing the telephone 
networks for their long distance communications 
needs. 


TELEVISION RECEPTION 


Those of you who have a TVRO receiver and dish 
can give try this experiment. Determine the IF 
output frequency of your satellite receiver – 
usually 70 MHz, but this can vary from one 
receiver to the next. It appears at the output to the 
descrambler unit, in most cases. 


Point your dish at a satellite known to handle 
SCPC, select the appropriate transponder, and 
connect the 70 MHz IF signal to the antenna input 
connector on your scanner. Set your scanner to 
NFM mode. 12.5 kHz steps, and SEARCH the 
band from 55-85 MHz. If everything works you'll 
hear hundreds of signals. of which many are 
voice! 


You have to answer the quesuon: is this legal? For 
more data on satellite communications, contact 
Jeff Wallach, at the Dallas Remote Imaging Group 
BBS, (214) 394-7438. 


BACK TO REALITY 


So what is the Ultimate Scanner? Okay. PI tell 
you what 7 think it is... It's a cost-effective. full- 
featured scanning receiver that can do all you want 
it to do at à performance level that meets or 
exceeds reasonable expectations. This is with the 
acknowledgment that manufacturers seem to think 
we are stupid and don't know what we want. and 
that we Il be satisfied with whatever they care to 
hand us. Nor! 


Ya’ gota start somewhere. . The Ultimate 
Scanner begins with a full tunction scanner that 
provides space, power supply, and general 
opportunity for the hobbyist to add features and 
contrivances to satisfy every possible and practical 
monitoring urge. Here's some help... 


WHAT DO YOU START WITH? 


There's a lot more to the Ultimate Scanner than 
meets the eye... much more. The challenge starts 
with ti mips! You can't get blood out of them. 
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Your cherished Snakebite XR-7265A scanner 
bought at a swap meet eleven years ago, won't 
appear on our list of contenders. Neither will that 
sporty Horsey-Cow HC-800GTZ. C'mon, 
folks... get with me. Ever since I wrote my first 
two scanner hack books. some complain that I 
didn't create magical “snip a diode/clip a resistor" 
mods for those revered Snakebite and Horsey- 
Cow scanners. 


Whoaa there, hoss, I DID the research. There ain't 
a thing I can do for such scanners that wouldn't 
cost a lot more than a brand new. top-of-the-line 
modern scanner! 


I conünuallv get letters and e-mail from guys 
begging for me to develop some turbowhopper of 
a mod for their 589 bargain-basement, 16- 
channel. 2-band Widget that barely qualifies as a 
scanner in the first place. Hey, lm not putting 
these instruments down: they have their place 
where there is a specific need to be fulfilled at the 
lowest possible cost. You don t find Honda 
Civics running in the Indianapolis 500. mv dog 
can't compete in the Kentucky Derby. and your 
Snakebite doesn't make the starting line in the 
Ultimate Scanner race. 


A candidate for the Horsev-Cow might be the 
Emergency Medical Technician who has to stay in 
touch with his dispatch center. even when off 
ашу. For this dude. н makes no sense lo spend 
5400 on a hobbyist scanner when ап el-cheapo 
will work fine on the 450 МНА EMT trequency. 


A drug peddler who wants to keep tabs on the 
local gendarmes doesn't need the Ultimate 
Scanner thougb he can probably afford to have an 
engineering team design one from scratch. 
Newbies to the hobby don't need а hot-dawg. rip- 
snorting. fire-breathing TurboWhopper. 


These guys shouldn't even think about turning 
their Squeaky Samnnues into the Ulwmate Scanner. 
It can't be done. 


Once and tor all: [ develop projects designed to 
make GOOD scanners BETTER. and they're for 
hobbyists — not for those who can support their 
Job with a simple one channel receiver. 


GREAT SPECIFICATIONS, BUT... 


Let's take a iook at a pair of ice scanners ihe: 
ought to be natural lead-ins to Ultimate Scanner 
Status. bui aren't the AUR AR-3000 and ine 
Yupiteru NIVT-7100. 


The AR-3000 sports specifications that boggle the 
mind, goggle the eyes, and toggle the ears three 
ways from Sunday. It has everything: triple 
conversion, computer interface, S-meter, SSB. 
and a tuning control – this baby seems to have it 
all. That would be true except for the hefty price 
tag, limited distribution, inferior firmware, poor 
service manual, and the unresponsiveness of the 
USA distributor when I asked for technical 
information. The AR-3000 service manual (that I 
compiled on my own) is an incomplete composite 
of cutouts and photocopjed pages sent to me by 
hobbvists over the years. 


Based on the poor manual and the company's 
evident desire to keep secrets. there was no way 
my thousand bucks was going to find out if the 
AR-3000 was a worthy contender. You might say 
that 1 have a case of sour grapes... 


Noooooooo, that's not it. If it were, then some 
other engineer would be out there making a case 
for the AR-3000 to become the Ultimate Scanner. 
You don't sec it happening, do you? But there's 
more: Í talked with several owners of the AR- 
3000. None seemed ecstatic about their thousand- 
dollar scanner. and the average favorable comment 
was: "Oh. it’s a very nice scanner, but..." There 
aren тапу AR-3000 s in circulation: not nearly 
enough to drum up any real interest in hacking it. 


So if T bought one and invested my time and 
energy into it for a few hundred people. Га end 
up eating out of the local soup kitchen mission. 
Mv decision was wise. in retrospect: the AR-3000 
scems to be disappearing. and the former 
distributor carries another tine of scanners now... 
Impressive specifications. but the same attitude. 


JUPITER 


So what about the Yupiteru (its really Jupiter. but 
there's no ^J" in Japanese. and there's a final "u^ 
at the end of many Nthon-go words). The MVT- 
7100 and its related brothers, sisters, and cousins 
are excellent, so what's wrong? Basically. they re 
illegal. that's what. 


For reasons unknown 10 yours truly, Yupiteru 
created а whopper series of scanners that could 
cover trom DC-to-daylight and do most 

every iung but spoon feed you your dinner ~ and 
then chase Europe for their marketing playground. 
Maybe these scanners couldn't meet the FCC's 
cerufication standards? Maybe Yupiteru thinks the 
USA doesn’t have a serious scanner market? ] 


Cheek: The Ultimate Scanner 


don t know. But the bottom line is that Yupiteru 
scanners are not FCC certified and therefore are 
illegal to import into this country, and to sell. 


Ob. sure, a few USA scannists bought Yupiterus 
from European distributors and then jumped onto 
the computer networks and information services to 
Whoop and hotler about their acquisitions. My 

first response to those who asked if I wus going to 
get one was. "What about the Service Manual for 
these rigs?" So here it sits, boys and giris’ a 
contraband radio cannot possibly contend as a 
Starting point for the Ulumate Scanner project 
because it is doomed to very limited distribution, | 
can't pay a whole lot of attention to scanners to 
which no one else pàys much attention. 


WHAT DO i NEED TO SUPPORT A 
MODIFICATION PROJECT? DOCS! 


Some people told me that the AR-3000 scanner 
could have become much more popular had I 
given it balf the focus of the PRO-2004/5/6 series. 
Maybe, but I need more than hardware alone — 
consider the effort required to reverse engineer 
such а complex instrument! 


if you think I'm ignoring a first class scanner. 
then before yelling at me tell the distributor that in 
addition to hardware, I must have a proper service 
manual and serious technical disclosure to support 
my projects. 


TECHNICAL DOCUMENTATION 


The common thread that eliminates many scanners 
(тот the competition for Ultimate Scanner status 
is painfully apparent: tack of service manual and 
technical data. I cannot pui my effort into a high 
technology instrument withoui benefit and 
guidance of the documeniation. which must 
contain at least the following: 


Legible, professionally rendered. complete 
schematic diagram(s). 


Assembly drawings of similar quality. showing 
part locations. ID. etc. 


Complete wiring diagramts) and interface data, 
of similar quality. 


Parts list/bill of materials with part numbers, 
circuit symbols, and iogistical information. 


Functional block diagram. 


Specifications and technical description of 
major circuitry. 


Detailed alignment instructions. 


Integrated circuit, transistor and other solid- 
state Component pinouts. and functional 
diagrams. 


Troubleshooung charts: key waveforms: typical 
voltage and resistance measurements. 


If a service manual doesn't contain most of the 
above, there isn't a snowball’s chance їп a fast 
burning forest fire that 1 will mess with the 
equipment. If a manufacturer doesn't think 
enough of his products to professionally 
document them, then why should I invite certain 
trouble? I may fit a lot of adverse and perverse 
descriptions. but masochist? Nor! 


So that you will know how I judge a service 
manua), I wil} describe AOR’s as inferior, 
Uniden’s as adequate, and Radio Shack's as 
superior. ICOM, Kenwood, and Yaesu manuals 
are generally good to superior, but these are not 


just “scanners,” are they? 


POPULARITY 


Here's another consideration: popularity! No, 
scanning is not exactly a popularity contest, but a 
serious contender must appea! to a significant part 
of the community and garner its support, and it 
must also generate a growing body of technical 
and operational knowledge collected by ~ and 
shared among - dedicated hobbyists. No one 
person can do ALL the work in this field. The 
development of a scanner hack usually involves 
several people. and preferably a iot of people. 


Do you wonder why the PRO-2004. PRO-2005, 
and PRO-2006 achieved such popularny? Support 
of the product by the average consumer - and by 
the manufacturer — and by the serious hobbyists 
who hacked them and shared information. 


Popularity means sales volume and satisfied 
owners. Popularity means size of the 
"aftermarket." Popularity means third party 
businesses that perceive opportunity to sell 
literature and develop accessories. How many 
books and aftermarket accessories are there for the 
AR-3000, and how many for the PRO-2004/5/6 
series? I know of two third party products that 
support ће AR-3000. but there must be hundreds 
for the PRO-2004/5/6 family. 
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Now do you see? It doesn’t matter whether the 
chicken or the egg came first. What matters is that 
there are chickens and eggs; lots of both. It takes a 
good product that generates hobby support and 
third party activity... 


The hobby produced a huge demand for the PRO- 
2004/5/6 series, but few buyers even knew about 
the AR-3000. That’s not my fault; it’s not your 
fault. It may not even be the fault of the AR-3000. 
Who cares? OK, if you are one of the AR-3000 
minority. you will care. That's understandable: I 
sympathize but I can't help you. 


Y our first step is to form an AR-3000 Users 
Group to gain some mass and then apply pressure 
on the distributor to produce a professional service 
manual. Then you have to convince an engineer or 
two that there is opportunity in the research and 
development for this fine rig. And that is where 
you will skin your knees. The engineer(s) may 
agree with you that it’s the “best radio" ever 
produced. Then they will ask you how come more 
weren't sold. They Jacked... /7. Whats “IT?” 


A LOOK AT RADIO SHACK 


Radio Shack has the advantage of a store on most 
every street corner, but that won't swing the 
balance alone. l'd have to guesstimate that Radio 
Shack has brought over a hundred scanners to 
market since the early 70's, but less than 10% 
have been siandouts. Sorry. but ihe PRO-2020 
and PRO-30 together with about ninety others 
are... turnips. The advantage of over 7.000 outlets 
is nice, but that’s not /7. 


Radio Shack maintains a fantastic parts and 
consumer support facility in Fort Worth. TX, 
called the National Parts Center. at (800) 442- 
2425. That's where you get your service manuals 
and repair parts for mos. any electronic product 
they ever sold. Parts and manuais ere stocked for 
at least five years after a product goes off the 
market. Prices are reasonable, and delivery is 
quick and sure. provided you do the ordering 
vourself. 


You'll make a big mistake if you let a Radio Shack 
salesperson order a part or manual for you. You'il 
be asked a litany of questions starting with, “Isn't 
it an Owner s Manual you want?." to "What do 
you need with a Service Manual?.” to “You re not 
going to work on your scanner, are you ^,^ 10 
“Would you like some batteries to go with that 
manual?”,..and oa and on and on. 


—————————— eee aaa 


Just order the dang thing yourself, okay? 


But yes, Radio Shack's parts center i5 a great 
resource that certainly contributes to the advantage 
held by the PRO-2004/5/6 series. It's important, 
but even Radio Shack turnips enjoy the same 
support: so parts availability alone ain't JT. 


WAY BACK THEN 


A bit of history will show you what "7T" is. I was 
hacking scanners as far back as ‘8J or ‘82 when 
the PRO-2002 came out. I needed an S-meter for a 
professional] requirement and of course, the 
machine didn't come with one. 


So I hacked my way into the 2002 and made an S- 
meter. In the process, I found some now forgotten 
diode (clin or add - I don’t recall) that opened up 
the forbidden government band, 380-410 MHz! 
Wow! A bit more research produced a (clip or 
add diode that allowed 800 MHz programming! 
Zounds!! Followed by gloom... the PRO-2002 
lacked the necessary RF circuitry to actually 
receive 800 MHz signals. regardless of what the 
computer told the RF circuit to do. 


Back then, Citizens Band hacking was the hot 
topic. and it never occurred to me that there might 
be ап interes! in hacking scanners so 1 didn't even 
look. T still don’t know if anyone else managed to 
hack 380-410 MHz out of their PRO-2002. Гуе 
been locking for that mod ever since (1 never 
bothered to write jt down and sold the rig five or 
six years ago) and nothing's turned up. Nice 
scanner, the PRO-2002, and it still rates high on 
my list because of the fluorescent display, accurate 
digital clock, and decent semi-s!oped keyboard. 
The guts were nothing spectacular, but in its dav it 
was a Standout. 


І hacked scanners a decade ago, and to the best of 
my knowledge I was alone. Then came 1986 and 
the now legendary PRO-2004. Armed with my 
knowledge of the PRO-2002's technology. and 
similarities in the 2004, I hacked my way into it 
and discovered latent cellular capability, [00 extra 
channels, and a 25% speedup. all for free... 
nothing more arduous than clipping or adding 
diodes to the keyboard switch matrix. 


[ wrote those mods up into an articie гот Popular 
Cemmunications magazine and before long, those 
mods -- and many тоге ~ appeared in oiner 
magazines. The revolution was born; others 
jumped onto the bandwagon. In 1988. an R. 
Roth. of Canada. offered a few typewritten and 
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handdrawn pages of mods for the PRO-2004; 
Jerry Callam. of Ohio. started up a hacker 
newsletter. first called The PRO-2004 News and 
later. the Reaftstic Scanner News. Roth’s mod 
sheets disappeared within the year and the 
Realistic Scanner News mysteriously died without 
explanation about a year after it started. One 
enterprise no sooner disappeared than two more 
were born. however. A Terry Vaura of 
Pennsylvania apparently was the first to contrive 
and/or publish a version of the 6.400-channel 
memory for the PRO-2005 in about April. 1988 
About the sume time. Tom McKee of Key 
Research, developed the now famous Search & 
Store Modules for the PRO-2004/5/6. 


Several rudimentary computer interfaces had been 
dcveloped for the PRO-2004 by 1991. and of 
course, ny two Scanner Modification Handbooks 
became sensations in that period. When the PRO- 
2005 appeared in May, 1989, and the PRO-2006. 
a year later, it didn't hurt that their designs were 
virtual clones of the PRO-2004 with only minor 
additions and upgrades. Monitoring Times and 
Popular Communications magazines have 
regularly featured articles and hacks on the PRO- 
2004/5/6 sincc 1986. 


Be patient... I’m coming to /7. 


Even today, as of this writing. the PRO-2035 is a 
close relative to its three predecessors. If you're 
familiar with one, you're familiar with all four! 
For that matter, the PRO-43 shares some of the 
electronic design of these four. Meanwhile. the 
support of these better scanners continues to 
escalate now thal worldwide computer network 
conferencing has caught on. We hackers und 
scannists Communicate with each other around the 
globe on our favorite subjects almost like hams 
and CB'ers do. Questions stimulate thought: 
thoughts spark ideas: засах ignite creative juices. 
the flow of which results in something being 
brought into reality. 


IT! 


It seems that EVERY successful scanner has 
generated an intense interactive hobby discussion! 


That's what "7T" 15. then: a synergy of thousands 
of people with a common interest, common goals, 
and the willingness and ability to communicate. 


Radio Shack has nothing to do with it, though 
several of their scanners occupy honored seats. 


The store on every corner, availability of parts, 
and good service manuals contribute a lot, but its 
market synergy that creates the most successful 
scanners, and the candidates lor Ultimate Scanner 
projects. 


BACK TO THE FUTURE 


While this unusual revolution about hacking and 
re-engineering scanners was launched with the 
PRO-2004 and perpetuated via the PRO-2005, 
2006. and PRO-43, it leaked and overflowed onte 
the field occupied by all other scanners. The most 
common quesilon from entry-leve! neophytes over 
the computer networks today goes something like. 


“Hi! ї heard that my SuperWhizBang CD-540YK 
Snukebite can be modified for 863,677 channels 
and coverage from ) Hz to 645 GHz by cutting a 
trace and adding a resistor. The guy I heard it 
from doesn't remember the exact method, but he’s 
certain it can be done. You know this one, don't 
you, Bill?" 


The question is harmless enough, but it gets better 
when, after a few days. по one can answer the 
poor misguided fellow, and he cornes back. all 
frosted over, chiding those who hold the secret to 
his Life's Dream and won't divulge it. Everyone 
nowadays seems to think they're sitting on gold in 
their Jead scanners. 


At the risk of sounding offensive, please listen to 
me when I claim that over 90% of all scanners are 
worth less than lead boat anchors in terms of 
getting anything more out of them than provided 
by the manufacturer's original design. 


Most scanners, especially the modern ones. are 
just fine for the purposes for which they were 
intended and sold. When 1 call ‘em turnips. I'm 
just saying that you better be satisfied with what 
you have; else peddle. pawn, or give 'em away 
and get yourself something that has some 
potential. 


At the end of this chapter, ГЇЇ give you a list of 
scanners that I think are the contenders for 
Ultimate Scanner projects and those which have 
sorne potential for greatness if you dig in and 
sweal it oul. 


There is a distinction between those hackable 
contenders for the Ultimate Scanner and those 
which stand no chance. YOU must come to grips 
with this distinction because an understanding of it 
can save you a lot of grief and expense. The age 
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of alchemy is gone; the Age of Enlightenment is 
here. Only a handful of scanners have any serious 
modification potential. and even fewer are 
contenders for the Ultimate Scanner throne. 


I'll cover most to some extent in this book, but 
please don’t get yourself all worked up into a snit 
because I didn’t mention your Horsey-Cow HC- 
800GTZ. 


WHO DO І WORK FOR? 


Before we move on. I have to clear up one little 
misconception. 


You may think 1 am on Radio Shack’s payroll. 
..d wish, T Just praise, rant. and rave about a few 
of their better scanners. I'm a tell-it-like-it-is sort 
of dude, and ГЇЇ give credit to ап enemy and scold 
a friend when they deserve it. Well, I don't like a 
lot of Radio Shack’s stuff, but they market some 
mighty mean scanners. and they are convenient 
for parts, supplies, and support. On that note, 
we'll proceed so long as you don't accuse me of 
being on their payroll. 


Basically, {don’t like алу of the manufacturers, 
not the big ones. anyway. ] m a former corporate 
president and CEO who Knows what goes on up 
there in the headsheds. Y don't mean anything 
sinister by that; just that their preoccupying 
interest is sales - sales - sales - today. Tomorrow 
will take care of itself. 


Now that I am on a "sabbatical" and on the 
opposite end of things. I don't like how we're 
treated as customers. 


TALKING TO THE INDUSTRY 


It gripes rne no end that there are so few effective 
channels by which we can communicate with 
businesses to let them know what we want in the 
products on which our hard earned money is 
spent. They’)} say they're in touch with their 
markets, but how? Letters? Phone? Ri--ght, 
Ralph. 


Try boogeying into your corner Radio Shack or 
Uniden store and tell them what you want in next 
year's scanner. Or call 'em up at their Headsheds 
and enjoy the interlude while they humor you. 


You may spend hours working through the 
computerized telephone maze, only to leave your 
advice or want list on an answering machine with 
no tape. 


SCANNER ECONOMICS 


Let's do some simple math and see if the numbers 
converge on a reality... or at least a likelihood. 


The Radio Shack catalog is a market barometer. 
and the current one dedicates about five pages 
solely to scanners and scanner accessories, with 
18 models for sale! The catalog has 217 pages 
plus the index. Five out of 217 pages is a shade 
over 2% of the space. Is it reasonable, then, to 
guess that 2% of their annual sales derives from 
scanners and related accessories? Anyone have the 
latest Tandy Annual! Report? ...in a minute. 


Here's a second way to guess the size of this 
industry. Assume that there are over 7.000 Radio 
Shack stores, and that each sells four scanners per 
month (conservative estimate); that’s 336,000 
units per year. If the average sale 1s $150. that’s 
annual scanner sales exceeding $50,000.000. The 
real numbers are probably higher, but the 
conservative figure is sufficient for this instant 
market analysis... 


So how about Uniden? Let's be liberal and guess 
their sales are about equal to those of Radio 
Shack's; after all, a lot of Uniden product is sold 
by Radio Shack. The rest of the competition will 
be bundled in: so let's say iUs also a SSOM/year 
business. 


Shooooey. that ain't hay, boys and girls. Now 
let's tackle some real numbers and check our 
work. Radio Shack’s owner, Tandy, published its 
sales for the first nine months of 1994 at $3.1B, 
for a yearly rate of at least $4B. Wow! Their 
catalog devotes 2% of its space to scanners, and 
2% of that $4B is $80,000,000. Our estimates 
look okay – or even conservative, don't they? 


Therefore, a $100,000,000 USA scanner market 
is possible. OK, let's get real here: $100 million 

total comprises only a small part of Uniden's and 
Tandy's gross sales figures. 


But the USA is about one-half of the world 
consumer electronics market, so one can guess the 
total global scanner business to be about $200 
million. 


That's just a medium profit-center to them, and it 
works fine as-is! From our end of the telescope, 
those numbers seem to justify effective lines of 
communication to cultivate this market. 


But there's nothing like that. You can shout, but 
the only people listening are your fellow 
hobbyists. 
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OBSTACLES 


Рт supporting the notion that if we want the 
Ultimate Scanner, we'll have to build it ourselves. 


There are increasing obstacles, however. Гуе 
been told that Radio Shack has a policy to fire any 
emplovee who is into hacking scanners. Radio 
Shack is actively pasting a negative aura onto the 
mere concept of scanner hacking and those of us 
who do it. 


For certain, neither I nor the hacking community 
have ever done anything to undermine the sales 
revenues of these corporations. Hacking our 
scanners 15 our business and it only serves to 
popularize the scanners that we select for our 
loving attentions. 


[m sure that a few more scanners than expected 
go back to the Service Centers for repair, but it 
cannot be an alarming number. This modem 
technology is very forgiving of error. and in all 
the trouble cases of which [ am aware. the great 
majority of unfortunate hackers were able to 
straighten out their own messes, quickly und 
easily. with or without my help. 


I know of less than a dozen cases where I referred 
the poor hacker to his nearest Service Center. And 
I know of only two basket cases that resulted from 
incompetent hacking. (f the manufacturers worry 
about the potential for dramatically increased 
service calls, it's a false alarm. That's because in 
most cases the hacker will gladly pay for the 
service, thereby contributing to the profit margin 
of the Service Center. Warranty work will not be a 
problem with a properly written warranty in the 
first place, and many hackers wait out the major 
portion of the warranty period before ripping into 
the scanner s gizzard. 


We're an opportunity and a source of revenue. 
even if you occasionally see evidence that the 
industry doesn't think much of hackers. 


THE EXPECTED LAWYER STUFF, 
TRANSLATED TO ENGLISH 


And now we have to pur in a warning. Hacker 
books must have them, you know. .... 


Radio receivers imported into - or manufactured 
for sale in — the United States are required by [aw 
to be “cerufied™ by the FCC and labeled that 
certain technical standards have been mei. This 
"eeruficadon is more or less a blanket kind of 
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thing, but it is based on the design and initial tests 
of production models of the receiver. 


A manufacturer is permitted to place the 
“certification label” on the receivers after the FCC 
approves the design and test results. and may 
continue to place the label on al! subsequently 
manufactured units without further red tape so 
long as the design and assembly are not changed 
or altered. When the design or construction of the 
receiver is changed. the certification process has to 
be done all over again. 


How does this influence us hackers? Generally, it 
shouldn't, since there don't seem to be any 
certification rules as a contingency of ownership 
and operation. These rules are aimed at SALES of 
receivers. Therefore, it seems Jawful enough to do 
whatever you want with your receiver after you’ ve 
purchased it and before you go to sell it someday. 


The manufacturer has met its obligations under the 
law. and as far as I am aware, no “modification” 
laws are imposed on the end user/operator. 1 
suppose you could find yourself riding on the 
turnip truck if you did something to your scanner 
that made it emit such strong interference as to 
wipe out the neighborhood's television reception. 
Short of that, hacking your scanner is probably 
legit. though you might wish to consult with an 
attorney just to be on the safe side. 


I am NOT an attorney and І am NOT telling you it 
is legal to hack your scanners. I just rhink it's 
okay. as long as it does not emit unlawful 
interference. 


On the other hand, there may be a bit of a problem 
if and when you want to SELL your magnificent 
TurboWhopper Ultimate Scanner. Since you've 
modified the sucker from its original certified 
condition, the authorities just might deern that 
original certification to be null and void and 
thereby concoct ample reason to deposit your 
personage into the Federal slammer and your 
TurboWhopper into the Evidence Room. Sounds 
a little far-fetched. but far-fetched things like this 
can happen, 


Just to clear my conscience (and stay out of 
trouble myself). Т have to warn you to be aware of 
this potentially troublesome matter and advise you 
to consult with an attorney before you advertise a 
cellular-capable Ultimate Scanner for sale. 
Authorities do look at advertisements from time to 
(ime... especially radio authorities who, in their 
off hours, are probably about as interested in radio 
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as you and me, Radio is one of those rare pursuits 
where it's fun to both work and play. 


Remember that... 


THE CONTENDERS, RUNNERS-UP, 
ALSO-RANS 


And now, the moment arrives. I have to pick and 
choose among over 400 scanners ever made, 
looking for those that will get special treatment 
and focus in this book. Justice can be done only to 
a handful, for the many reasons already cited. The 
primary criteria for attention include the age. 
availability, and quality of the scanners. These 
criteria are, for the most part, objectively derived. 


The only emotions possibly involved are toward 
those scanners where manufacturers or 
distributors were either uncooperative or where it 
was not possible to obtain quality service 
manuals. 


With exception of the PRO-2004/5/6/2035 series 
(impeccable credentials and established quality), T 
do not buy scanners for personal review until J 
know my investment will be sound. 


Manufacturers do not give or lend me scanners for 
review. Until they do. I have to BUY them. just 
like you do. at retail. in order to develop any 
substantial knowledge of them. J can't afford to 
buy more than a few and I won't buy just any 
scanner until I have a reasonable assurance that the 
purchase will be wonhwhile. 


Part of that knowledge comes from my extensive 
pre-reviews of tbe service manuals. Part comes 
from evaluating press releases and media attention 
on new market entries. Part comes from intuition 
and experience. And part cornes from the user 
community which generally makes the best 
judgment of all. 


The list that's about to corne really wasn't picked 
so much by me as by YOU. My pick is really a 
consensus by the hobby; based upon our ability to 
support the best opportunities. 


If your radio does not appear on the "good" list, 
please don't be offended; it is merely one of those 
rigs with which you will have to be happy pretty 
much as it is. There isn't really anything I can do 
to get your radio on the list. Turnips, remember? 
On the other hand, there is a LOT that can be done 
to most any half-way modern scanner, and a few 
things that сап even be done to some turnips. 


I’m not going to prepare detailed hack attacks for 
every scanner ever made. But there is a section 
that applies to most scanners and how to dissect 
them and identify those areas that can be modified 
or enhanced. You will receive generic instructions 
and a general plan for the hack attack. Jt will be up 
to you to apply this plan to your particular 
scanner. Remember, I can't cover them all. 


MORE AND MORE CAVEATS 


If your radio /s on the list. don't do handsprings 
and somersaults: you might hurt yourself. Radios 
on this list might or might not be capable of all the 
performance you want. Also, I will not prepare a 
detailed hack attack for all these, either. As I 
develop a modification for a particular scanner, J 
will offer general tidbits on how to apply it to 
other scanners... if it can be done. Sometimes, a 
mod will be good only for two or three radios, 
sometimes just one, sometimes all but one. You 
know how it goes by now: we're at the mercy of 
the original design. One example is the group of 
extended memory modifications... P) show the 
new techniques for one scanner, and those 
techniques are readily adaptable to the other dozen 
or so scanners that use the same kind of memory, 
and/or the same chip configuration. 


If I showed them all, with every possible 
permutation, this book would outweigh your car. 


SUMMARY 


With this, my third scanner book, and a four-year 
publishing record with the World Scanner Report, 
] think Į am in tune with the scanner community. 


Sull, there are some who can't be satisfied. Like 
the angry fellow in late 1994 who bought one of 
my first two books (published respectively in 
1989 and 1991), and was incensed that his PRO- 
43 (introduced in 1993) was not covered in them. 
That dude came after me with both barrels. 


My goal for this book is to concentrate on a few 
widely accepted radios in the pursuit of the 
Ultimate Scanner and at the same time, convey a 
variety of modifications for several scanners so as 
many people as possible can benefit from the 
Hacking Experience. 


This is your adventure, so STOP! LOOK! 
LISTEN! Get prepared mentally, physically, 
emotionally. 


Cheek’: The Ultimate Scanner 


Develop an attitude; gather some patience; pack 
your sack: stash your trash: open up your nund 
and let your fantasies unwind....... 


ULTIMATE SCANNER STARTING 
POINTS, TABLETOP UNITS 


Radio Shack | PRO-2004, 2005. “2006, ~2035 
AOR AR-3000A*, AR-8000A* 
Other TR-2400*, TR-4500* 

* Author's choice of best of the best 


RUNNERS-UP 
Radio Shack | PRO-2032, 2036, 2037, 2026 


Uniden BC-760, 890, 8500, 9000* XLT 
AOR AR-2500*, 2515* 
Other Shinwa SR-002, Regency R-1600, 


ICOM R-100*, Kenwood RZ-1* 


NON-CONTENDERS NOW, 
BUT IN THEIR TIME? 


Radio Shack | PRO 2039, 2030, 2027, 2022, 


2003, 2002 
Uniden BC-855, 800, 590 XLT 
AOR AR-950* 
Other JIL SX-400 


ULTIMATE HANDHELD SCANNERS 


Radio Shack| 'PRO-43 

Uniden BC-2500 XLT 

AOR AR-1000XC*, 1500*, 8000* 
Yupiteru MVT* 

ICOM R-1 


* Author's choice of best of the best 


ULTIMATE HANDHELD SCANNERS — 
RUNNERS-UP 


Radio Shack| §PRO-43a, 39, 37, 34, 46, 


51, 62 

Uniden BC-200, 100, *220 XLT*, 
SC-150B* 

Regency R-4030, 4020 


$ non-cellular replacement for original PRO-43 


.. throughout, wherever vou see an asterisk *: 


1. and my fellow hobbyists who share 
information with me, don't know a lot about 
these radios other than published specs. 


That's due to recent entry, no technical support, 
lack of cooperation by manufacturer and 
distributor, etc. They therefore cannot he treated 
comprehensively in this book, and are listed 
only because of apparent good technical 
specifications. 


WHO'S GRE? 


The PRO-2004. PRO-2005, PRO-2006, PRO- 
2035, and PRO-43. manufactured by General 
Research Electronics (GRE, of course) in Japan 
for Radio Shack, are superbly crafted scanners, 
readily available on the new and/or used markets 
as of this writing. 


The PRO-2035 is the non-cellular-capable 
replacement for the PRO-2006, but makes up for 
that deficiency with an overwhelming number of 
brand new features and powerful capabilities. 


FEATURES AND CAPABILITIES 


The PRO-2035's lack of cellular capability and the 
possibility only of a 1-way computer interface 
certainly helps the PRO-2004, PRO-2005, and 
PRO-2006 retain the rnarket's interest. They are 
not outdated at all! АП four share much the same 
design, with the first three being almost clones of 
each other. The PRO-2006 and the PRO-2004 are 
much alike, though the 2006 is advanced in the 
speed, squelch, and selectivity departments. 


The PRO-2004 can be modified to 2006 standards 
in all ways but speed - and maybe that too, 
though I confess І haven't tried. The PRO-2004 
hit the streets 1n September, 1986, and was 
replaced by the PRO-2005 in May, 1989, after 
which foliowed the PRO-2006 in May, 1990. 


The PRO-2035 shoved the PRO-2006 off the 
shelves in September, 1994. 


Each of these four has special merits over the 
others such that I can hardly rate them against each 
other. All are “separate but equal” in my opinion, 
just like my children, the exception being the 
PRO-2005 which has almost no technical 
advancement over the PRO-2004, and which 
otherwise was downgraded from the PRO-2004 to 
a plastic case with an inferior keyboard. I see no 
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reason to settle for a PRO-2005 unless you 
already have one. You're not stuck; it’s Just not 
your best starting point. 


FAVORITES 


My personal favorite remains the PRO-2004 
followed by the PRO-2006 and then the PRO- 
2035 with the PRO-2005 bringing up the rear of 
the winners list. For you dear readers, I suggest a 
different rating structure, in this order: PRO-2035 
-2006. -2004. and -2005. T have to put my own 
feelings aside for the greater good. your good. 
and so I'll emphasize virgin newness for wannabe 
and novice hackers. The PRO-2035 will remain 
new and on the shelves for some time: the rest are 
relegated to "used" status now. and unless you 
know what you're doing. the used-market is 
always risky. If you are technically savvy. you 
can go by my preferences. though most likely 
you'll have your own. If you really need a guide 
in à big way. then you can buy the PRO-2035 
with a clear conscience. despite my teeth- 
gnashing. 


Us old-timers generally resist new stuff. vou see. 
You can think for yourself. Now let s chat about 
each of these contenders. 


То help you make a good decision as to where to 
start, and what to start with. here's some insider 
stuff. 


PRO-2004 


Be careful with the PRO-2004 because early in its 
production ife (early 1987), there was a run of 
units with defective solder joints! Apparently, the 
production wave soldering machine slow]: drifted 
out of whack before the problem was discovered 
and corrected. 


The result was that a few hundred PRO-2004's 
passed guality control їп the plant. but failed some 
time thereafter. Radio Shack х warranty program 
caught quite a few, but some units performed 
flawjessly until well after the warranty hail 
expired. 


Symptoms of ihe problem include intermittent 
operation at first, and finally. totai failure. The 
fatture mode was offen exacerbaied by ambient 
and internal temperature excursions. (Solder metal 
expands and contracts with temperature changes.) 


These defective PRO-2004's ran well at cooler 
temperatures, but as the units warmed up, 
operation turned erratic and then failed and often 
stayed failed until cooled down. Between 
warranty and after-warranty repairs, I would think 
most of these defectives have been remedied by 
now. 


I repaired quite a few between 1987 and 1993. 
The stream seems to have diminished now with 
the remaining defectives probably having been 
junked for parts or stowed away in garages and on 
closet shelves. 


This highlights a slight risk in buying a used 
PRO-2004 now. Check it out thoroughly before 
committing to the deal. If it continues to function 
after a thorough warm-up. Га guess it will 
perform well in the months and years ahead. but 
troubleshooting and correcting defective solder 
joints 1s not an easy task, and will be expensive, if 
professionally done. 


There is no known common failure mode in these 
deteciive PRO-2004's, the bad solder joints can be 
anywhere та the unit, and I have seen some units 
require several repair cycles before all the 
defecuve joints were found and resoldered. Fix 
one bad joint today, but another could pop up 
tomorrow, see? 


| do not know of any comparable failure modes in 
the PRO-2005. PRO-2006. and PRO-2035. If 
you find one working, there is every reason to 
believe it will stay working. So now you 
understand why I rank these scanners a little 
differently. depending on whether the list is for 
you or for mc. 


I can fix "em. but have to assume you can’t. 


VIVE LA DIFFERENCE! 


There were two distinctly different productions of 
the PRO-2004, by the way. and the defective 
solder-joint problem seems limited to the liest. 
There's both an easy and a pain-in-the-butt way to 
tell the difference between the two runs. 


The hard way js to pop the metal case off the 
scanner; nira the unit upside down, and pry off 
the compartment cover to the Logic/CPU board. 
PC-3. Inside will be a large 64-pin DIP chip. the 
CPU Early units had the chip number "GRE- 
0327" and later ones were marked "GRE-0327A."7 
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The easiest way to tell is possible ONLY after the 
scanner has been modified for cellular capability. 
Early models with the 0327 chip will Limit and 
Direct SEARCH in 12.5 kHz steps between 
868.950-870 MHz; and the normal 30 KHz steps 
between 870-890 MHz. 


The 12.5-kHz step appears again between 
891-894 MHz. Units with the 03274 chip will 
search the entire CMT bands in the proper 30 kHz 
steps. The chip has nothing to do with the 
defective solder joint problem, but if vou re 
buving a PRO-2004 from someone, and it has the 
0327A chip, your concerns can be lessened. On 
the other hand, it’s always possible that the 0327 
chip was swapped out for the 0327A, so examine 
the unit closely, if vou can. 


Caveat emptor! 


THE FIRST MODIFICATION! 


This prompts the first Ultimate Scanner mod in 
this book! If you have one of those early PRO- 
2004's that otherwise works okay, you can 
upgrade it to the later version by exchanging the 
GRE-0327 chip with the newer GRE-0327A chip, 
available from Tandy National Parts Center at 
(800) 442-2425. Order for catalog #20-119, 
GRE-0327A. circuit symbol JC-503. 


Disconnect all power; remove the Memory 
Retention Battery: cemove the seven screws from 
around the perimeter of PC-3; disconnect ONLY 
the one cable and connector CN-501 from the left- 
rear area of PC-3. The board can then Гир up. 
forward, and over to allow easy access to the 
solder side of the board. 


Removing that 64-pin DIP chip is rot ihe easiest 
chore in the world. but can be done if vou ic 
patient and persistent and use a solder sucker and 
desoldering wick. Also. T hope vou have plenty of 
time to do it right! 


You may have to cut some pins away trom the 
chip ор the component side. especialiv those that 
are soldered to both sides of the board. That's 
okay, because you really won't need the old chip 
anymore. Once you have it out, there is no earthly 
good reason to solder the new one in! Instead. 
solder in a 64-pin DIP socket or a pair of 32-pin 
pin-line sockets to the board. 

Then plug your new CPU chip into the socket! 
Cheap insurance against blowing the new CPU 
with excessive heat or mishandling. Also. it will 


be a snap to replace if ever the new CPU blows 
for any reason. 


If your PRO-2004 otherwise runs well, there may 
be no reason to rush into this hack, but ] don't 
know how long Tandy will stock the replacement 
0327A chip so it may be wise to get one before 
гоо Jong. No manufacturer stocks parts for off- 
market products forever, most being for about five 
years after the model goes off sale. 


While you're at it, there are a couple of other parts 
you might want to stock up for a contingency. The 
first is the electroluminescent panel backlight for 
the (liquid crystal) display. 


For some reason, these darned things wear out 
and need periodic replacement. The part number is 
GE-86D-6011. You might also want to lay in a 
spare front panel assembly and keypad overlay. 
part numbers GA-86D-6385 and GE-86D-6358 
respectively. These latter three items, EL Panel. 
Front Panel, and Keypad Overlay will make your 
PRO-2004 look brand new which might enhance 
its sale 1f you're looking to peddle yours. 


ANOTHER 2004 HACK 


We haven't gotten to the real modtfication section 
yet. but I will highlight one more possible upgrade 
for the PRO-2004 for those daring and foolhardy 
souls willing to try anything, Besides, if you 
totally blow your unit trying this, you won’t even 
need the rest of the book. 


i haven't done it myself, nor do ] Know of anyone 
who has, but 1 suspect (and other expert hackers 
don't disagree) that a PRO-2006 CPU might be 
made to replace the one in the PRO-2004! The 
PRO-2005 CPU is a 72-pin. more or less square. 
surface-mount (SMT) equivalent of the PRO- 
2004's 64-pin DIP CPU. 


Comparing the two service manuals, it can be seen 
that each of the two CPUs have the same number 
of exactly matching functional pins at 62 each. 
The PRO-2004 5 CPU has two “п/с” (no 
connection) pins while the PRO-2006's has ten 
"n/c" pins. 


/ The process would entai} laying the 2006's CPU 


atop a 64-pin machine-pin IC socket or header and 
with point-to-point wiring. connecting each of the 
surface-mount chip pins to the corresponding pin 
of the DIP header or socket. 


Good luck... and as always. LET ME KNOW! 
This is how our body of knowledge grows. 
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THE 2004 DIODE MATRIX 


Next, the diode matrix of the 2004 has to be 
rearranged to match that of the 2006. Again. 
comparison of service manuals is required. I m 
not going to spell out the details here, since if 
you re ballsy enough to try this job, you're 
sufficiently astute to have already noted the 
remaining minor differences betwcen the two 
switch matrices. Naturally, you'll exchange the 
2004's CX-501 at 7.37 MHz with one from the 
2006 at 12 MHz. 


Microsurgery is definitely required for this Job and 
with the cost of a 2006 CPU in the neighborhood 
of $50, this is not a job for the faint-ot-heart nor 
those to whom disaster might cause a heart attach. 
50. if you're gutsy and had а recent physical, get 
out your blowtorch and crowbar! 


There is plenty of risk here, and if the project is 
successful the rewards might be worth it onlv to 
the most dedicated hobbyist who leaves no stone 
unturned. Benefits of the updated firmware of the 
2006's CPU over the 2004’s really boii down loa 
max speed boost from 20-ch/sec to 30-ch/sec. 
diode speedups already considered. 


If this job 1s successful. then modifying squelch 
(Chapter 6) and selectivity (im working on it 
will give you a PRO-2006 in PRO-2004's 
clothing: clearly the best of two worlds. 


2004 SUMMARY 


Summarizing the PRO-2004. `$ an excellent 
scanner that either has all the specs and capabilities 
of the PRO-2006 or that can be brought up to 
most Specs with relative ease. 


The PRO-2004 is unique. without peer. given 
rugged construction, metal cabinet. sloped front 
panel, large display, and a smooth. tactile 
keyboard on which (after some practice) your 
fingers can really fly! 


The PRO-2004 has plenty of real estate for 
modifications and add-ons. The downside is its 
age and slight potential for solder joint problems. 
If vou can live with that, then the PRO-2004 is as 
competitive as any and better than most, and 
clearly qualifies as a foundation for the Ulumate 
Scanner. I see used PRO-2004's conunually 
appear on the market for between $25 and $150 
with about $75 typical and reasonable. 
Professionally hacked and upgraded PRO-2004 s 
command much higher prices. though. 


PRO-2005 


The PRO-2005 is little more than a repackaged 
PRO-2004. The AM section sports a ceramic JF 
filter for better aero band selectivity than its 
predecessor; otherwise, its entire electronics 
layout was changed for the new chassis and case 
thai were to become standard эл the product line. 


The front panel is nearly vertical and the keypad 
reduced in size and refitted with discrete buttons, 
making operation more of a chore. especially for 
southpaws and for those with large hands. The 
display is functionally the same as that of the 
PRO-2004, but smaller and harder to view. 


Still... if vou Rave one of these units. 3t might be 
easier to upgrade to 2006 specs than the PRO- 
2004, with a simple squelch modification and 
replacement of the stock CPU with one from the 
PRO-2006: a drop-in replacement. By “drop-in,” T 
mean pin-for-pin replaceable, 


Unsoldering those 72-pins without damaging the 
Logic/CPU board is easier said than done. but I 
have done it. Of course, CX-501 at 7.37 МН» 
needs to be replaced with the 12 MHz version 
from the PRO-2006. The keyboard matrix needs 
to be made to match that of ihe PRO-2006. Бш 
you'll know what to do there if you're capable of 
replacing the CPU. 


Another possible way to upgrade to PRO-2006 
specs Is to replace the entire Logic/CPU Board 
with one from the 2006. The expense of this at 
just under $200 is probably not worth it just to get 
30-ch/sec. Also, Radio Shack Service Centers and 
Tandy National Parts wil} not ordinarily sell vou 
an entire board. 


I mention this only because I have heard of it 
being done. Гуе tried to get boards and they 
won't sell them to me. The 2005 had such a short 
market-life you don't see too many used ones on 
the market. Prices vary wildly. but I'd not pay 
more than about $50 for a clean one. 


Summarizing the PRO-2005. it's a PRO-2004 
with missing advantages, but it 15 a good unit. If 
you already have a PRO-2005. then use it. You're 
sitting on à machine with potential to manipulate it 
into the Ultimate Scanner of your dreams. 


PRO-2006 


For many of vou, this is the best there is! The 
scanner market was sound asleep when the PRO- 
2004 was introduced in 1986, and by the time 


ac 
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people woke up the 2004 had been replaced by the 
2005 – which lasted but a year. 


The PRO-2006 was introduced during a period 
when the scanner market literally exploded and 
went through the roof. It stayed on sale fer four 
years of a boom market. and i would guess there 
are maybe a quarter-million or more of them "out 
there" now. 


If your scanner budget is tight, hang loose 
because more and more of these will appear on the 
used market in the months and vears ahead. 
Expect prices to range between $125 and $300 
through 1996. 


Beware that a change of faceplates on a 2005 with 
one for a PRO-2006 сап conceal the scanner's 
identity. It’s not foolproof, but check the label on 
the rear chassis before buying a used "PRO- 
2006." Better to pop the top cover and look for 
“ТР-2” on the main receiver board. In the 
PRO-2006, TP-2 1s near T-6 and D-33 while in 
the PRO-2005, TP-2 is located next to ІС-2, Pin 
9, and CN-4. 


There are other ways to tell the difference between 
a bogus PRO-2006 and a real one, but the 
foregoing 1s about the quickest, easiest, and most 
certain. 


I know about this scam of dressing up a PRO- 
2005 in 2006's clothing, thanks to a fellow who 
had requested assistance from me about a 
modification on his 2006. I asked him to take a 
measurement at TP-2. but he reported back that it 
didn’t exist! Huh? Later he wrote to proclaim that 
I must have been mixed up... “TP-2 was located 
by ІС-2' Whoooaaa there. Hoss... brakes! 
Screech! Halt! Turns out he had just bought his 
scanner from a Radio Shack store... it came with a 
box. front panel. rear label, and owner's manual 
for a PRO-2006, but TP-2 was located by IC-2! 


That's a PRO-2005. boys and girls. no two wavs 
about it. Some double and triple checks confirmed 
it. so I referred the fellow to his local Radio Shack 
District Manager and never heard from him again. 


I have since determined that it i5 relatively easy to 
remove that label on the rear chassis and replace it. 
Exchanges of the front panel are a piece of cake. 
Scan speed is not a very good indicator of which 
scanner it is, because a couple of speedup mods 
can push the PRO-2005 close to 2006 specs. 


So let buyers of used PRO-2006’s beware — there 
is enough difference between the two that if you 
pay atfention, you can prevent the possible scam. 


TELLING THE DIFFERENCE 


There were two distinctly different productions of 
the PRO-2006, by the way, but there is no 
functional difference between the PRO-2006 and 
the PRO-2006A. distinguishable by either of two 
methods. 


The PRO-2006A is noted by its "Light" switch on 
the front pane! and the catalog number of 20-145А 
on the real panel label. 


The PRO-2006 is distinguished by the “Dimmer” 
Switch on the front panel and the catalog number 
of 20-145 on the rear panel label. The first two 
years of the PRO-2006 had the dimmer switch 
which brightened or dimmed the blue LCD 
backlight, while the last two years of PRO-2006’s 
had the “Light” switch which just turned the 
backlight on and off. That is the only difference 
between the two units, and it is not significant. 


I suppose of the two, the better is the 2006A, 
because keeping the backlight turned off when not 
needed will prolong its life somewhat. That's 
splitting hairs! 


The PRO-2006 is a righteous scanner with a ton 
of performance and an ounce of drawbacks. 
Drawbacks are but two: the unrecoverable gap 
between 520-760 MHz. and the poorly designed 
keyboard. 


Any other shortcomings are common to most all 
scanners, for the most part and need not be dwelt 
upon here. Performance is rock solid, with good 
sensitivity, good selectivity, immunity to image 
frequency interference and most other forms of 
pseudo interference including intermod and 
strong-signal overload. 


Of course, the PRO-2004/5 and 2035 share this 
advantage for tne most part, too. The PRO-2006 
is highlv modiftable, exceptionally forgiving of 
error, and will be supported by Tandy National 
Parts for the next several years. The PRO-2006 is 
the latest. newest, and most potent of all widely 
available scanners to go onto the used market. 
There just isn’t anything much really bad to say 
against the PRO-2006, so it's right up there as one 
of the best choices as a pathway to the Ulumate 
Scanner. 


PRO-2035 


I have this new scanner in my paws, hot off the 
assembly line. but there's not much F can say 
here, yet. It’s good. and we're off to a great start, 
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but the BBS needs input from all you hackers so 
we can really get going on this one. 


I can highlight some ups and downs about the 
PRO-2035 here, based on my experience with it 
so far. For the latest on this fine unit, including 
the continuing saga of specific modifications for it 
and worldwide user experience, you'll need to 
take out a subscription to the World Scanner 
Report where ме” keep it current and under 
continued development. 


EVOLUTION 


The PRO-2035 is very much like its ancestors, the 
PRO-2004/5/6, in its fundamental design. There 
are differences, but they are mostly enhancements 
rather than fundamental changes. 


The first major difference I saw was а new Master 
Reference Oscillator, X-301. in the PLL section in 
the shielded cornpartment just behind the tuning 
knob. This one is 12 MHz in contrast to the 10 
MHz version used in the PRO-2004/5/6. 
Otherwise, the PLL section is similar to that of its 
predecessors. 


Another difference that jumped up and bit me on 
the nose was an apparent lack of a Memory 
Retention Battery, but then I found it, a 3-volt 
"button" type lithium cell soldered in place on the 
main receiver board! This is goíng to pose 
problems for the casual "Joe" who doesn't know a 
soldering iron from a tire iron. 


We hackers will manage nicely, since Radio 
Shack will probably stock these batteries for one 
thing and replacing it will be a piece of cake to 
those who know how. 


The harder-to-replace Memory Retention Battery 
might suggest that Radio Shack thinks it won't 
need replacement very often. I'm not sure I see 
how tbat can be since for all intents and purposes, 
the memory chip is about the same as that of its 
predecessors, which we all know can drain a 9- 
volt battery in a year or so. 


We'll see... 


MEMORY 


The PRO-2035 uses not a2k X 8 SRAM (16k) 
like its predecessors, but an 8k x 8 (64k) S-RAM. 
Therefore, my standard memory mods will work 
well without deviation from procedure. A 32k x 8 
SRAM will provide 4,000 channels while a 128k 


x 8 SRAM will yield 16,000 channels. See the 
modification section for the latest variants of how 
my MOD-16 Extended Memory will be possible 
for the PRO-2035. 4,000-16,000 channels should 
suffice for most needs, eh? 


THE BOARDS AND DISPLAY 


The PRO-2035 has only two printed circuit 
boards, both much easier to access and hack than 
those of the PRO-2004/5/6. The Main Receiver 
board is out in the wide-open spaces, top and 
bottom, so that removal will rarely if ever be 
necessary. 


You can get to most everything here! The 
Logic/CPU board is also easier to access with no 
soldered-down shields nor cramped quarters as in 
the PRO-2005/6. 


It's hard to beat the ease of access to the 
Logic/CPU board in the PRO-2004, but the PRO- 
2035 comes close. 


The PRO-2035 does not have a separate LCD 
driver chip like the PRO-2004/5/6, which means 
that it's located in the CPU chip where we can't 
access it. That precludes a full adaptation of the 
CE-232 Interface to this rig. A one-way interface 
using the CE-232 for AutoProgramming and 
Keyboard Controlling from the PC has been 
successfully implemented, but the data acquisition 
side seems improbable without the abilitv to 
access the serial data and serial clock lines 
between the CPU and LCD driver. 


The trouble-prone electroluminescent backlight 
panel (EL Panel) of the PRO-2004/5/6 series has 
finally given way to a modem concept: light 
emitting diodes! The PRO-2035's LCD Display is 
illuminated from the rear by nine bnght yellow- 
green LEDs to produce an adequate contrast with a 
rather sick color. I guess blue LEDs are still too 
expensive for Radio Shack's blood, but if you 
don't like the sick green, it may be possible to 
change LED’s for a back-light color of choice. 


MORE COMPARISONS 


In terms of hardware, I see very little that can be 
called “пем” in the PRO-2035 with exception of 
the “TUNING” knob and its related functions. 
This means that most of the feature differences are 
a matter of firmware that’s permanently 
programmed into the CPU. Firmware features are 
a problem to us hackers because it makes the 
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receiver more and more like a computer that's 
dependent on the quality of its software as to what 
can be done with it. 


Well. modern software is really hard, if not 
impossible, to hack. Uniden has long relied on 
firmware to make its scanners seem so attractive, 
but when you start trading off hardware for 
software. there is always a loss of quality. This is 
especially applicable to both computers and 
radios. because it's the hardware that determines 
quality while software or firmware determines 
what and how much you can use that hardware. 


Well. the PRO-2035 seems not to have lost much 
of the hardware sported by its predecessors and at 
the same ume, it gained a lot of firmware. In the 
final analysis, it is probably the best overall 
receiver so far in the series. but it may well be the 
last of the best, too. if the move to firmware is any 
indicator. 


The PRO-2035 is definitely a hands-on scanner in 
the sense that its new features of channel and 
frequency management are controlled from the 
unappealing keyboard. That is to say that you can 
move frequencies around from channel to channel 
or even move whole groups of frequencies at one 
time by keyboard manipulations... a nice touch. 


But that’s "firmware" for you. 


Even the TUNING knob is more a matter of 
firmware than hardware. Knobs are knobs, and 
this one goes straight to the CPU if that tells you 
anything. When you control a CPU, then you're 
controlling the firmware, or exactly what the 
manufacturer wants you to control, and nothing 
more. Understand? Comprende? Savvy? 
Wakaremasuka? 


Just keep in mind when you look at flashy 
features on an as-yet unreleased, six ounce, 
micro-sized SuperWhizBang that it consists of a 
case and a chip, so you cannot get to the guts of it. 
The more discrete components, the easier it is to 
hack. The more highly integrated (fewer chips and 
inaccessible programming, or firmware), the 
tougher. 


Fortunately, the PRO-2035 retains much the same 
electronic design as its predecessors, which 
means, firmware or no firmware, there will be a 
lot we can do to polish this baby: S-meter, Center- 
Tune Meter, Extended Delay, Automatic Tape 
Recorder Switch, Extended Memory, and much 
more. 


Given time, this unit will evolve! 


SUMMARY OF THE WINNERS 


Any of the PRO-2004/5/6 and PRO-2035 units 
will make a fine cornerstone for the Ultimate 
Scanner of your dreams. 


It's a tossup as to the best of the best and I won't 
make that choice for you. Each has advantages 
over the others. but the PRO-2005 is slightly 
behind the front runners since it is a repackaged 
PRO-2004, and misses a few niceties. 


The PRO-2035 offers distinct advantages if ultra- 
modern features and utmost basic performance are 
at the top of your list. 


On the other hand, if cellular capability and full 
two-way computer interface potential are at the top 
of your list, then you will select between the PRO- 
2004 and PRO-2006. 


AND NOW THE REST OF THE PACK... 


Sorry, but AOR and their complementary or 
competing (dunno which) TR-series scanners will 
only be casually mentioned, for previous}y stated 
reasons. They are premium, high quality 
scanners, and for some operators. may indeed be 
the Ultimate Scanner. Great specs, super 
performance, but... 


They have good performance out of the box. It’s 
just that you're on your own when it comes to 
modifying these rigs: I can't get enough 
information to help you with them. 


And regardless of how good they are, they are 
missing ГТ! There's just not enough hobbyist 
discussion and experimentation to generate the 
synergy that makes a product successful. 


ULTIMATE SCANNER RUNNERS-UP... 


The PRO-2037 with its triple conversion and 
‘hyperscan’ may be among the best of this bunch, 
but with limited coverage and other ho-hum 
features, it won't climb higher. The PRO-2026, 
Uniden BC-760XLT, and Regency R-1600 are 
clones of each other, though the PRO-2026 has 
different firmware and internals. 


Nice scanners for the most part, but Jacking in the 
more critical performance features demanded by 
the compleat scannist. 


The BC-760XLT was long Uniden's flagship 
until eased aside by the BC-8500XLT. It’s 
capable of some decent hacks including cellular 
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and extended memory to 6,400-channels or more. 
Also capable of CTCSS operations with Uniden's 
optional add-on module (but you're paying MORE 
for SILENCE!). 


There were two productions of the BC-760XLT, 
the early one prior to 1988 that sported a 
Motorola-type antenna connector: and the later 
version, with a BNC connector. The guts of the 
two were markedly different as well, which 
explains the different cellular restoration 
procedures. 


The R1600 is a clone of the later BC-760XLT but 
is not seen around much. Uniden bought out 
Regency à few years ago and probably continued 
to make a few scanners under that name to 
appease Regency loyalists for a while, The BC- 
890XLT was a decent scanner. but overpriced and 
there's little that can be done with this rig. Lots of 
built-in (inaccessible) firmware; no guts. 


The BC-8500 and 9000XLT lead Uniden's line of 
quality scanners, with no close contenders in 
terms of performance. features, and modifiability. 
While they are indeed feature-rich, the BC-8500 
and 9000 do not contend with the Ultimate 
Scanner contenders because they are not cellular 
capable, cannot be interfaced to a computer and 
typical of the Uniden line, though anything can 
happen when we thoroughly evaluate the new 
9000. 


They are nice looking scanners loaded with highly 
integrated chips and firmware, packed into a 
mostly empty cavity. 


There isn't anything much you can do to Uniden 
scanners, including the top-of-the-liners. Uniden 
receivers are fabbed with proprietary chips and 
modules (flatpacking, as we say in the trade), with 
high levels of integration. While this makes for 
good performance:price ratios, cheap assembly, 
and good reliability, there are tradeoffs in access 
and modifiability. Here it is again: when you 
cannot access the circuitry between two functions 
integrated into a single chip, you lose options! 


If you never remove the cases of your scanners, 
then the BC-9000XLT is worth a second took on 
your shopping list. Tt is the best they’ ve managed 
to date. You'll see later where there's not a lot we 
can do to it. When it comes to modifiability, the 
BC-8500 and 9000 are very nice... turnips. 


Radio Shack's PRO-2036 looks suspiciously like 
the Uniden BC-8500XLT, and is probably a clone 
with Radio Shack custom-specified firmware. 


More and more of Radio Shack's scanners are of 
Uniden origin, so this is a distinct probability. If 
$0... yawn... except for its optional CTCSS 
capability if that’s important to you. 


Uniden has now released its 9000XLT, a 
considerable improvement over the 8500-series, 
but no cigar! As-is, it is à very good scanner with 
excellent performance (low noise, high sensitivity, 
fast switching/seeking, etc.), but for us hackers 
it's a problem since, like its Uniden predecessor, 
it’s highly integrated. 


NON-CONTENDERS BUT QUALITY (IN 
THEIR TIME) 


These scanners are all nice... or once were... in 
their time. There is nothing about them now to 
warrant a lot of attention. Some are new or current 
market models, but all on this Jist have old 
technology in them or they are highly integrated 
and inaccessible, or use high levels of integration 
without accessible ROMs or data paths. 


There are a few things that can be done to these 
scanners, so watch for them in the modification 
section just ahead. Don’t get mad because [ don't 
rate them highly. Sorry, but they're (nice) turnips. 


ULTIMATE HANDHELD SCANNERS 


My choice of the Ultimate Handheld Scanner may 
scem arbitrary and capricious to some extent, but 
to my way of thinking there's a solid foundation. 
The PRO-43 (not sold anymore) was one helluva 
handheld that shared some of the electronic 
architecture of the PRO-2004/5/6 and 2035. The 
actual receiver diagrams appear startlingly similar. 


The PRO-43 offers quality not available in any 
other handheld scanner. Now I will readily 
concede that the AR-1000XC, AR-1500, and the 
new AR-8000, not to mention the ICOM R-1 and 
the Yupiteru MVT-7100 all offer greater coverage 
and more features than the PRO-43. Take that to 
the bank. If you are a shortwave listener and a 
scannist, but can have only one radio, then one of 
these may be better for you than the PRO-43. If 
so, I don't mind. 


Just be forewarned that the ICOM R-] and the 
AR-1000 are not "user fnendly.” The ICOM R-1 
has a major design flaw in its relatively simple 
receiver section that admits massive interference 
and birdies. Incidentally, it has а superb service 
manual, but there is little that can be done to this 


unit because it’s so tightly packed and integrated. 
Buy an R-1 and you have to be happy with it as it 
is. Nice radio, except for its birdie/interference 
problem. 


And just try to get a service manual for any of the 
Yupi or AR radios. The AR-1000XC is a nice 
radio, and they make other good ones, but without 
technica] support and disclosure it's an also-ran in 
the Ultimate Scanner race. 


BACK TO THE 43 


The original PRO-43 is backed by a great service 
manual and has a triple conversion, double- 
balanced mixer receiver that's free from most 
interference. Jt has wide coverage and is cellular 
restorable. The 54-88 MHz band is recoverable, 
too! No big deal since most of that band is the 
VHF-Lo TV area, but there can be a lot of 
interesting action in the Jittle known 72-76 MHz 
utility band, which is otherwise blocked until you 
restore it. 


Beware the new PRO-43A sold after April, 1994: 
so far, we haven't found a way to get that extra 
coverage. Consider it a different scanner! 


There's a bit more in the PRO-43 that can be 
extracted including a great S-meter function, an 
audio improvement or two, and even a nice 
rnemory expansion. Cramped quarters and skimpy 
real estate conspire to limit the things that can be 
done to the PRO-43 or any other handheld for that 
matter, though a LOT can be done if you tack on 
an external box to hold all the extra goodies. 


Most people aren't that willing, and so I don't 
consider handhelds to be serious contenders for 
the Ultimate Scanner, per se. If there were such a 
contender, the PRO-43 would be one because it 
can also be adapted to work with the CE-232 
Interface for AutoProgramming and keyboard 
control from the computer! 


Believe me, it's not fun to sit there and hand- 
program in 200-channels at a whack on that tiny 
keyboard, or do any serious operating from it. 


But hook the PRO-43 to a computer, plug a decent 
antenna into that jack, and it's as good as just 
about any tabletop units. 


Even in handheld scanners, computer interface is a 
well defined need. By the way, I know a 
dedicated scannist who designed a functional one- 
way programmer interface for his АВ-1000ХС, 

so for you dedicated AOR fans, there may be your 


ticket to the Ulttmate Handheld Scanner . 
Otherwise, my choice is the PRO-43......the early 
model; NOT the later one descrtbed below. 


ULTIMATE HANDHELD SCANNERS — 
RUNNERS-UP 


The PRO-43A is a runner-up because production 
was altered to meet the requirements of the 
TDDRA law that forbids “easily modified cellular 
capable" scanners. A new CPU and a slightly 
redesigned Logic/CPU board in this unit makes 
recovery of the cellular and 54-88 MHz bands 
impossible. AH PRO-43’s sold after April, 1994, 
are the "A" version. If there is the "Radio Shack" 
logo on the front case of the PRO-43, you can let 
your suspicions rise, whereas if the logo is 
"Realistic," modifiability is a safe bet. 


There is also a date code hidden in the PRO-43's 
battery compartment, but it wil! be helpful only if 
it hasn't been removed. It has been pretty well 
established that PRO-43's with a date code of 2A4 
and earlier are modifiable, 3A4 may or may not 
be, and 4A4 and later are definitely not 
modifiable. An "A" prefix in the serial number 
means it has the newer CPU and is the most 
reliable indicator that modifiability 15 very limited. 


Words to the wise... 


Beware acquisitions of Jater PRO-43's if cellular 
and 54-88 MHz are on your list of important 
capabilities. Otherwise, the PRO-43A is a potent 
and high performance handheld scanner. 


MORE RUNNERS-UP 


Also on the list of runners-up in the handheld 
category are the still-useful oldies/goodies of the 
past, including the PRO-34 and PRO-37 which 
are electronic clones of the PRO-2022 base 
scanner! (Betcha didn't know that.) Lay their 
schematic diagrams side by side and you can 
hardly tell the difference. Therefore, what can be 
done to one can be done to the other two. 


These aren't what you could call ‘great’ radios, 
but they can be made a lot better than what came 
out of the box. 


The PRO-39 is a "come and gone" handheld that 
had some potential, but just didn't last long. The 
PRO-46/51/62 are johnny-come-lately's with 
nothing exciting about them other than decent 
memory and speed. 
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The time-honored Uniden BC-200XLT and BC- 
100XLT are on this list with good reason; they're 
good radios but not much can be done to them. 


I don't know about the newer Uniden Sportcat 
and BC-220XLT but their specs are impressive 
enough to give them a mention. 


As usua), beware Uniden with lots of features 
packed into an empty case, as highly integrated 
circuitry means that you and I cannot reach it! 


By the way, the Regency 4030 and 4020 are 
clones of the BC-200XLT and BC-100XLT. 
respectively. Not many are around, but they're the 
same rigs. 


WRAPPING UP and MOVING ON 


My aim for this section was a broad overview of 
the Ultimate Scanner Contenders, and those that 


have no chance. To those astute scannists whose 
positions were already established before ever 
opening this book, I apologize for the ‘waste’ of 
space. I think, however, that I was able to convey 
a lot of useful information about scanners and 
what they're made of. 


The Ultimate Scanner will reach audiences never 
before touched by this type of book, so it was 
important to chat a little about features and 
differences from one scanner or brand to the next. 


You never know who's going to pick up this 
book, and we want it to help as many people as 
possible. 

Let's now continue the Great Adventure. Ladies 
and Gentlemen: light up your gasoline torches, rev 
up vour attitudes and patience. on your mark... 
get set... 


Let's Go! 


A portion of my Shack. 
Believe it or not, every dial, knob, LED, and meter has a function! 
The computers are mostly behind me... 


— Wm rà 
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GENERAL MODIFICATION 
TIPS, HINTS, and KINKS 


This chapter will slip а few general purpose tidbits 
and tools into your warbag. Having The Right 
Stuff on hand will improve confidence as you plan 
and begin the metamorphosis of “Squeaky 
Sammy” into the boss-hawg Ultimate Scanner. 


I'll throw in a few minor projects just to get your 
knife sharp, and perhaps to teach you technique 
and patience before you attack the main job. 


PROPERLY HACKING YOUR SCANNER 


“Properly” is a real issue, because I’ve noticed a 
rash of mis-hacked scanners coming across my 
bench. For the first couple of years after my 
Scanner Modification Handbooks came out, ] was 
pleasantly surprised at the few mis-hacks and 
serious errors. Frankly, I prepared for a flood, but 
the trickle lulled me into a false sense of security. 


It's a new generation now; maybe the “CB 
Butcher Brigade" has found its way onto the 
scanner scene, 


I've seen a lot of shoddy work lately, so it's time 
to review the basics. Several common factors are 
worth your attention. 


While fundamental techniques and principles of 
scanner hacking have not appreciably changed 
since I wrote my first two books, there have been 
a few refinements and perhaps a new trick or two. 
Again, as emphasized throughout this book, I am 
not going to repeat everything from my previous 
books. 


The Ultimate Scanner is a conunuation; an 
evolution; an advancement above and beyond the 
turf on which the earlier books cavort. 


If you are a beginner in the fine arts of scanner re- 
engineering, my first two books will help you on 
the Path of Enlightenment. They contain mods, 
projects, ideas, tips, tricks, hints, and kinks that 
will only coincidentally be covered in this third 
volume of exotic lore. No matter your status as a 
scanner hacker, if you don't have my first two 
books, you'll need them sooner or Jater. 


Now don't get frosted at this new concept, either. 
I have letters from readers who wanted to find 
everything for their scanner in one package, and 
they were steamed at “having to buy both books!” 
They'll be livid when they see The Ultimate 
Scanner! 


But I could make them a lot madder. if I tried. 


We could do one book, just as they asked. We'd 
stuff twice as much information into tt, at twice 
the size and twice or three times the cost, and it 
wouldn't be very timely. 


What we decided to do is a new and cost-effective 
book that adds to the body of knowledge. This is 
my third effort on scanner re-engineering. I don't 
know of any way around the dilemma. If scanner 
hacking is among your interests, then you're just 
going to have to settle in for the long haul and 
prepare for serial efforts. Forgive me, please... 


You may want to consider a subscription to my 
monthly scanner hacking newsletter, the World 
Scanner Report, which keeps the body of 
knowledge current, updated. error-corrected, and 
charts new territory in the world of re-engineering 
scanner receivers. 


Armed with my first two books, and now, The 
Ultimate Scanner, and with the World Scanner 
Report as well. you'll be wel! prepared for a 
TurboWhopper of an adventure. If your budget 
(time or money) won't permit doing everything at 
once, that's fine. You will find plenty here to 
chew. Managing the ol’ budget is a part of the 
patience you'll find me talking about in this book. 


Consider logging onto my computer bulletin 
board, the Hertzian Intercept BBS, where there is 
a wealth of technical information, frequency data, 
and distilled experience — from me and from 
hobbyists around the world. I am personally 
available on the BBS for many forms of tech 
support and consultations, including plain old 
chit-chatting. Please see Chapter | for detailed 
information about connecting with BBS's and 
associating with scannists the world over! A 
valuable resource, indeed... 


GET THE SERVICE MANUAL FOR 
YOUR SCANNER! 


Emphasized throughout my first two books, the 
service manual for your scanner is mandatory 
before vou do much more than pop the case. You 
will create needless problems for yourself without 
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one. and I will not be sympathetic when I hear 
you "lost yours" or never had one to begin with. 
You cannot be helped and you cannot build an 
Ultimate Scanner without а service manual. And 
don't whine that you can't read such a manual; 
sure you can! If you're going to hack, you'll 
learn. Get the manual! Here's where: 


Radio Shack scanners (800) 442-2425 
Uniden/Regency/Bearcat (317) 842-1036 
ACE/AOR scanners (317) 849-3570 
ICOM radios (206) 454-7619 
Kenwood radios (213) 639-9000 


Yaesu radios (213) 404-2700 


PREPARE A PLAN! 


Else suffer expensive or frustrating consequences. 
You should have a Plan behind your attack on the 
innards of your beloved scanner. Scanners have 
limited space jn which to work and to house new 
widgets. If you randomly and haphazardly install 
things now, imagine the havoc and constipation 
that can reign after you've done bunches of mods 
with no forethought as to what should go first and 
what should go last. This planning process is a lot 
like packing the trunk of your car for an extended 
road trip. Some things won't require access except 
in an emergency. while other things will require 
frequent access. 


I can't plan your hacking adventures — it's you 
who's best qualified to do that. But someone 
better do it. or else! 


What do I mean by "Plan?" Harrumph! I know 
you better than you know yourself. See, if you 
sneak into your scanner and puti off a mod 
successfully, it won't be long before you're 
sticking something else in there. And then again! 
And again. You won't be able to resist! 


If you don't take this into account from the very 
start, then your scanner is going to get cluttered 
and boogered up before you know it. And then, 
what if trouble arises with some real hairy mod? 
Well, your troubleshooting and diagnosis efforts 
will be severely hampered for one thing, and if 
you later draw a blank and ask me to service the 
unit for you, 7 won't do it! 


There's just no way that I can work free. And 
your budget can't handle 8-16 hours of my 
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fumbling around wondering what you did, where, 
and how. So keep notes... 


Maybe your first investment should be a dollar 
notebook. because you'll have to document 
everything you do, making reference to the 
original source of information, sketching wiring 
layouts, showing color coded wire, and more. 
That notebook might keep you sane, later. 


Keep things neat, and prepare for the future. The 
objective is to tuck away each and every mod as 1f 
there will be a hundred more to follow. Dress all 
wiring cleanly and neatly and out of the way. Wire 
bundles should he routed around the perimeter of 
the scanner, for the most part. Little circuit boards 
can be soldered to the meta! sides of the scanner. 
The power transformer can be removed to create 
more room for the larger mods, and besides, it's 
better to power the scanner from an external DC 
power supply anyway, because it runs cooler and 
makes things last longer. These principles are 
expanded in detail just ahead, so hang loose. 


Except for very high speed circuitry, digital 
modifications are not critical with respect to wire 
length. Two exceptions are extended memory 
modifications, and mods that connect to the 
Keyboard matrix of (һе scanner. In these two 
exceptions, keep the wire runs short. Otherwise. 
digital mods can be installed almost anywhere. 


RF mods need short wire leads, and audio mods 
require little attention to wire length, though these 
leads are higher-power and should never be cabled 
with RF and digital wiring. Another rule of thumb 
is that all ground wires should be as short as 
possible, while DC power leads can be of any 
length. 


Hobbyists tend to be impatient and hurried in their 
work. Force yourself to slow down; do things one 
step at a time, and make each step as perfect as 
possible before proceeding to the next. 


PATIENCE 


I know... "patience, my ass, I want to kill 
something." 


The problem is that without patience it will be 
your scanner that gets killed. Be forewarned, I 
now avoid servicing mis-hacked scanners. I tned 
it for a few years and after a severe combined 
attack of ulcers, hives, boils, cysts, zits. 
psoriasis, hair loss, and St. Vitus Dance, not to 
mention a tenure in the local alms-houses 


(homeless missions and soup kitchens), I had to 
give itup. My doctor, accountant, and family will 
not allow me to service hacker-blown scanners. 
Well. let's put it this way: the price starts at twice 
the cost of a new scanner and goes up from there, 
depending on the degree of damage and whether 
or not 1 have to open the case. Catch my drift? 


Really, the percentage of mis-hacked scanners 
remains very low, and I want it to stay that way. 
With something over 30 years experience behind 
me, I can tell you flat out that patience is a critical 
ingredient to the scanner hacker. Lack of skill 
certain]y can contribute to abysmal failure, but 
lack of patience causes it. So what is this thing 
called "patience"? 


Patience is the guiding light that oversees the 
following steps of hacking and re-engineering: 


Planning: Objectives, materials, procedures. 


Acquisition: Parts. materials, tools, supplies. 
service manuals. test equipment. 


Process Review: Ensuring that all needed 
materials and instructions are on hand and ready to 
go, and a son of rehearsal. 


Execution: The job itself. 


Work Review: Detailed checking of every step, 
with remedial action where necessary. 


Documentation: Drawings, test results, etc. 


Testing and Quality Assurance: Checks of 
solder joints. layout, mechanical integrity, out-of 
and in-scanner tests; evaluation of results. 


Acceptance: Remedial action to correct any 
deficiency. 


Not that you have to make a big deal out of each 
of the above steps (it won't hurt if you do), but if 
you are patient, you will not do anything before 
you're ready for it. 


That means having all required parts and materials 
on hand, preparing a plan, and being familiar with 
what you're about to do, before ever popping the 
case of the scanner. It also means documenting 
your work, so errors can be found and later mods 
added without frustration. 


IMPATIENCE 


Let's talk about impatience. ЇЇ you Jaunch a frontal 
assault on your scanner at 6 PM, expecting to 
enjoy the benefits of the back-attack by 8 PM, 


50 


then you are headed for trouble. When you rush to 
be done by a certain time, you're imposing limits 
and begging for mishap. 


Impatience prompts compromise when the right 
stuff isn't on hand, and there's no room for 
compromise in the Ultimate Scanner. Impatience 
is not stopping and going to bed at lam when 
you've been at it al] day, thinking the job would 
only be a "couple of hours." Impatience is failing 
to put the scanner aside for a while to get away 
from it all when something isn't going right. 
Impatience is sticking that mod in there and firing 
up the scanner without first checking al] your 
work for solder globs and wiring errors. 


Impatience is saying to yourself you’ ve checked 
everything when you buried the dang widget in 
there without testing it outside the scanner first. 


TROUBLE : 
Here is one of the most frequent ways I’m asked 
to help troubleshoot а mis-hack. ..... "I've 


checked everything three times and it don't 
work..." 


My usual reply for that one is "Okay, check ita 
fourth time — but this time, check everything." My 
definition of “everything” is E-V-E-R-Y-T-H-IN-G, 
not S-O-M-E-T-H-I-N-G. I guess those words sound 
a lot alike and confuse people. 


My mods generally work the first time out, if you 
make no errors. So you think I’m saying here that 
I make no errors? Най! Far (tom it. 


I make more than you do, which is why I am an 
expert on errors. You just don't get to see mine — 
by the time my mods appear in print, you can bet 
your sweet patooty they' ve been checked and 
field-tested by others. If an error goes undetected, 
we will publish its correction in the World 
Scanner Report and over the computer networks 
for the widest possible dissemination. 


You should not assume I made an error when 
your mod doesn't work and there are unturned 
stones іп your backtrail. 


When I' m asked for technical assistance, my first 
line of guidance is to be certain that YOU kicked 
over all the rocks. If you are impatient, there will 
be many unturned stones in your backtrail and T 
will find them, believe me, including all the 
critters and vermin that set up housekeeping 
underneath. 


Cheek*: The Ultimate Scanner 


Speaking of which, I have to tell you a little story 
from a couple of years ago when a fellow sent me 
a PRO-2005 to diagnose and repair. As I opened 
the shipping box, an odd odor wafted up from the 
scanner. It wasn't a familtar odor either, kind of 
pungent and rank. My first guess was that 
something had burned up. 


Blectronic components have odors all their own 
when they go up m smoke, and I’ve been around 
long enough to recognize nearly everything that 
can cook in an electronic circuit. But this stink 
was really strange! 


I popped the case of the scanner and was greeted 
by a massive scurrying, and the pitter-patter of 
little feet. I don't mean to overstate this, but my 
heart sorta stopped and blood chilled in my veins, 
As about a thousand "cucarachas" scattered helter- 
skelter all over my workbench. All work stopped, 
and we set off bug-bombs throughout the house 
and shop. We went out to dinner and the movies 
that night while the insecticide did its work. 


Believe me, my patience was tested that day. After 
a good cleaning (soaking in alcohol), the fellow’s 

PRO-2005 worked thereafter — once I got the bugs 
out of it. Another of those lessons of life, I guess. 


Anyway, make a solid commitment to planning, 
quality, and especially to patience. Not only is the 
result worth it, without it the penalty is high. 


SOLDERING TECHNIQUES 


Good soldering is neither an art nor a science, but 
a manual skill mixed with a little horse sense and 
the right tools. Since mistakes here (1) are 
common, (2) become evident later — usually at the 
worst time, (3) disguise themselves as component 
failure, and (4) are easy to prevent with the right 
approach, I'll spend a few minutes on the subject. 


While too much heat can fry a component, a little 
excess heat is better than too little heat! Low heat 
can produce cold solder joints. 


If they don't cause a fault now, they will later, 
usually at a most inopportune moment. Your 
soldering pencil should be rated at 25-to-50 watts. 
(I'm not advocating use of welding torches, 
though. } 


The tip of the soldering iron should be "iron clad,” 
not copper. After it's up to temperature, the tip 
should be wiped on a wet sponge before and after 
every solder connection to keep it clean — avoid 
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oxide buildup. [Immediately prior to making a 
solder joint, apply a dab of solder to the tip and 
then touch the tip to the connection to transfer heat 
to the lead or component. Wait for a second or 
two and then apply solder to the connection, NOT 
to the üp of the iron. Then pul! away the solder, 
but leave the soldering tip on the joint for another 
second before removing it. 


After the joint has cooled, it should be bright and 
shiny; not gray and wrinkled. and it should flow 
smoothly (a “fillet’’) to the surfaces of the 
materials being soldered. Solder, at the right 
temperature, will also flow into the heated Joint to 
make a permanent connection. 


HOOKUP WIRE 


This is an often overlooked subject. You should 
use only good quality, small gauge, stranded, and 
very flexible hookup wire for your scanner 
hacking projects. This eliminates most of Radio 
Shack "battery cables" which they call hookup 
wire. The insulation drips like melted candle wax 
and the wires are much too stiff and rigid for our 
needs. 


Radio Shack once had great wire, though it's been 
discontinued for several years. Sull, a few stores 
may have some in stock, and you should lay in a 
supply if you can find any. But it's not what you 
think it 3s! We're talking about their “Computer 
LAN cable," 8278-776 (25-cond) and 4278-775 
(9-cond). Don't ask me why they called it LAN 
cable; I don't think they knew either. 


You have to strip off the outer gray insulation and 
then remove the braided and foil shields, but 
what's left is some of the finest color-coded 
hookup wires you ever saw in your life! This stuff 
is So great you]] wonder how you ever did 
without it. It's very flexible, strong, and easily 
bandled in most circumstances. I don't know of 
replacements for these long discontinued cables. I 
laid in a monstrous supply when they were 
discontinued and haven't run out yet. No, I will 
not sell or give any of it away. 


Teflon? The temperatures in our scanners don't 
need teflon insulation, and it’s a bear to strip and 
work with, but teflon insulation identifies some of 
the best quality wires on the market. To use it, 
you have to find a high-quality stripping tool. 


I cannot over emphasize the use of good quality 
hook up wire in your hacking adventures. Use 
ONLY the general type of stuff described above. 


If your focal Radio Shacks are out of the good 
stuff, go to your local electronics supply house 
and ask to see their multi-conductor, shielded 
parallel cable or shielded senal cable. 


SERIOUS TOOLS, SERIOUS HACKING 


When did those new-fangled “hot glue" guns and 
glue sticks come out? Maybe 15-20 years ago? 
Yeah, well I ignored them with a passion until a 
couple of years ago when Ali, my lovely 
daughter, tapped me on the shoulder while I was 
hard at work one day, and asked if I’d like to try 
her hot glue gun. Now mind you, I had no use for 
"hot glue" because of a long love affair with super 
glues and epoxy resins. What could be better? 


Later. curiosity got the better of me. I plugged in 
that stupid-looking glue gun, rammed a .50- 
caliber stick jnto the magazine, and commenced to 
fire away at the first thing that moved. 


The gun has lousy range, so I missed the dog. Out 
oozed a gob of liquid plastic with the consistency 
of molasses in a winter blizzard, that landed 
smack-dab on the carpet of my workbench! The 
stuff is still embedded there! But I learned, and 
now use "hot glue" for most everything, no holds 
barred! And so should you! Here's the deal: 


First, we're not really talking about “hot glue." 
Maybe there 1s such a thing, but what I'm 
referring to is really a type of plastic. The refill 
package uses terms like “hot melt adhesive" and 
"glue sticks," but the stuff is really a plastic. 


A little glop of the stuff makes a great anchor for a 
wire bundle or а small circuit board. And I can 
think of a host of insulating and other anchoring 
uses. Í use it to make "rnolded plastic" connectors; 
to hold loose things down, to reinforce weakness, 
to hold LEDs in place, and sometimes just for 
sticking things together. 


Hot glue is an excellent insulator for exposed 
solder joints, wire splices, and electrical 
conductors that might short out against something. 


I would not use hot glue as an insulator for high 
voltage applications (250V) without first talking to 
the manufacturer about dielectric characteristics at 
high voltages. 


You won't find anything more utilitarian and 
useful for low voltage (5 and 12 volt) hobby 
needs, though. Tiny applications of hot glue can 
be fairly easily removed where permanency is not 
desired, say as anchors for wire bundles, and 
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small circuit boards. Another great application for 
hot glue 15 as "injection plastic." How many utility 
patch cables have you made over the years to save 
a few bucks? You'd do it more if they weren't so 
prone to failure, right? Most failures of homemade 
audio, RF, and computing cables occur in or at the 
connector. 


After you've made up a cable and checked that it's 
flawless, assemble the connector and its shell. 
Then, squirt hot glue plastic into the shell, binding 
everything together, for ultra reliability! 


I’m not sure there is a limit to the practical 
application of a hot glue gun, and you'll soon 
agree. I now use two different models; one is a 
larger type that uses glue sticks 4" long and about 
1/5" diameter. This type is great for bulk needs 
such as moldings and insulated surfaces for 
printed circuit boards. Then there is a dainty, 
petite type with slim glue sticks 2" long, for 
situations that need fine control and less glue. 


You'll need a separate glue gun for each size, but 
if you can have only one or the other, get the 
smaller size for most bench uses. 


There's no trick to using a hot glue gun — just 
squeeze the trigger (or push the rear of the glue 
stick) and out comes a hot stream of liquid plastic, 
the rate of which 1s proportional to the amount of 
squeeze or push. When not in use, the hot glue 
gun seems relatively safe, but you should devise a 
holder for it to point straight up so as to minimize 
leakage of the hot plastic. This will also help 
prevent the hot tip from touching your benchtop 
and causing a hazard. 


Safety first — always! 


Apply the hot glue with the nozzle as close as 
possible to the point of contact. Adhesion is 
enhanced if the point of application is warmed to 
the same temperature as the glue. 


[п other words, adhesion can be inferior if the hot 
glue is applied to a cold surface. I use a soldering 
gun and sometimes a butane device to preheat 
larger metal surfaces for best adhesion. Now let's 
find more great uses for the hot glop! 
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PIN-LINE SOCKETS (and PLUGS)! 


One of the slickest assets in the experimenter's 
shop is called a "pin-line" strip or "pin-line" 
socket. Radio Shack doesn't have them, so a 
universal reference is difficult, but DigiKey's 
"Pin-Line Sockets with ‘break’ feature, " part 
number A-208, is one example. 


Hosfelt Electronics’ "Machine Pin SIP Sockets,” 
part number 21-161 or 21-234 is another. Mouser 
Electronics offers their “SIP Breakaway IC 
Sockets,” part number 151-5530. All three of 
these suppliers have a variety of pin-line sockets 
in various configurations and pin-counts, so get 
their catalogs if you want to shop for the best 
"deals" for your needs. 


Imagine, if you will, a precision machined IC 
socket cut apart so that you have two strips. One 
of these strips resembles what we're talking about 
by way of pin-line sockets. The neat thing about 
them is that the male plug part mates perfectly with 
the female socket part. Because they are so small, 
the most immediate experimenter's application is 
that of a miniature, quick-disconnect plug and 
socket combination. 


Pin-line sockets are available in strips of as many 
as 56 pins each, and can be cut or broken apart for 
a desired lesser number. Suppose, for example, 
you had a pair of wires in your scanner that you 
wanted to quickly and easily disconnect from 
some special modification board you had installed. 
An excellent application! 


Cut the two wires, and solder the four cut ends, 
one pair to the male ends of a pin-line pair, and the 
other pair to the female ends of a pin-line pair. In 
this fashion, the plugs for one pair of wires will 
mate with the sockets of the other pair. Quick and 
dirty; neat and functional; and extremely low 
profile. 


You won't easily find a connector that's smaller, 
handier, more functional, or less expensive! 


See Figure 3-1 for views of two styles of pin-line 
sockets, and Figure 3-2 for how they can be easily 
pressed into duty as plug and socket connectors! 


General ' 


хао 


Spacing between pins is 0.1", center-to-center (1/10") 


Figure 3-2: Pin-line socket/plug connector 


Left: Socket Right: Plug Both: made from pin-line strips 


Pin-line sockets are machined to precision 
tolerances, usually (in U.S. products) spaced 
precisely 0.1" apart. center to center, like the Doles 
in "perf board" and “vector board.” 


They're usefut as IC-sockets in experimenter 
oroJects when you happen to be short of a socket 
or two: Just break apari a strip of whatever 
number of pins you need into (wo equal strips to 
match the IC and position them on the board for 
an instant IC socket! 


Drift j-mm diameter holes in the perf board or 
circuiti board surface for a snug fit of the upper 
body (fat parts) of the male pins. Three adjacent 
pin-line sockets make a great socket for TO-92- 
style transistors. The machined plug and socket 
offers a better electrical contact than conventional 
spring contacr sockets. 


MAKESHIFT IC SOCKETS 


Some conventional [C sockets fail for no reason 
other than poor electrical contact. I have never 
seen pin-line sockets fad in that manner — vou're 
looking at high reliability connections here! 
Another use t have found for pin-ltne sockets is as 
à wire splice. but with a difference. 


For instance. you may know that a lot of 
modification procedures call for the soldering of а 
wire or a component lead to a pin of an IC 


Figure 3-3: Molded socket/plug connector 
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somewhere in the radio. Instead of that. i first 
solder the male end of a pin-line socket to the IC- 
pin and iben use the exposed socket to accept 
either a male pin with its sockei soldered to the 
end of a wire, or sometimes a component lead will 
piug into the socket for à nice fit. and allow for an 
easy aisconnecr when the need arises. 


HI-REL MOLDED CONNECTORS 


When vou mix hot glue with pin-ltne sockets. 
you're looking at one heck of а molded-connector 
possibility! Talk about reliability! Just solder your 
pin-line sockets to а wire bundle and after 
examination and tests for errors, squirt some hot 
glue between and around the soldered points of 

| contact so that the metal is insulated and all wire- 

{ 10-ріп connections are separated bv a laver of the 
plastic molding glue. 


The results may not look great. but vou can't get a 
more reliabie connector for the size and cost. 
Figure 3-3 shows the same plug and socket 
combination as in Figure 3-2. but molded with ihe 
hot giue piasuc into à permanent, long-lived 
connector. 


Aside trom the reliability factor, a primary 
advantage of pin-iine sockets made into quick- 
disconnect connectors is the small size! Great for 
mod jobs in very small radios! 


| 
| 
| 
| 
| 


using pin-line hardware and hot-melt glue 


Just a little glop will do - nothing fancy needed! 
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NOTE: Clearly, such “home made” 
connectors would not be used in 
manufacturing, but in the R & D Jab they’re 
fine. A handful of pin-line sockets and a hot 
glue gun are mighty inexpensive 
"breadboard" items when the perfect 
solution isn't in the supply room! If you 
need to get on with your design. pin-line 
sockets and hot-melt glue might make a 
difference, both in the schedule and in the 
budget! 


Hot glue and pin-line sockets have become 
absolutely vital around my shop. where a lot of 
work is related to some form of R & D or testing 
and evaluation. I often need to stick things in 
somewhere for a quick observation and then pop 
them back out for revision or redesign. Time and 
reliability are critical in my work. and J just can't 
be bothered with a lot of wire splicing, soldering 
and desoldering. etc. 


Pin-line sockets and hot glue have boosted the 
quality and efficiency of my work and reduced 
much of the drudgery and monotony. Give these 
two items a trial run on your bench and watch the 
quality of your work and time go upscale! Many 
thanks to Ken Wells of Kwajalein, Marshall 
Islands. for the tip on pin-line sockets a few years 
ago. Ken aiso introduced me to high-reliability 
machine-pin IC sockets, without which Га never 
again function! And thanks to my daughter, All, 
tor the hoc glue idea! 


DENTAL TOOLS FOR SCANNER 
HACKING ! 


My better tools rarely come from electronic stores! 
Parts. yes. Solder, yes. A hundred other things. 
yes. Tools, usually not! Most of my hand tools 
come from dental supply houses now. 


Yes. they cost more. but it's a pleasure to work 
with fine steel: sharp cutting edges that don’t dull 
on the first sce or the 50th: magnifiers that 
magnify without distortion; tweezers that don't 
lose their ^tweeze" after a few grips; and 
hemostats (clamps) that glide through the varied 
uses put to them. Fine tools enhance and promote 
fine work. 


Dental tools are expensive, but you won't need a 
boatload at the onset. I would recommend three to 
start. and you'll go from there on your own, My 
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favorite is à toss-up between the 4" Hu-Friedy R3 
German stainless steel 606K curved hemostats, 
and a 6" G. Hartzell and Son “Carbon 44-20" 
chisel tipped plaque scraper. My #3 15 a weird pair 
of short bladed scissors that can cut sheet meta)! 
The scissors are 3“ long overall. with 0.5" cutting 
edges. The leverage is fantastic. and these scissors 
can cut and trim the chrome metal shield on the 
back of the PRO-2005/6 Logic/CPU board like a 
piece of paper, and without removing it! 


Next favorite on my list is a magnifier lens that 
clips onto my spectacles for hands-free, high 
magnification work. Immediately thereafter are a 
power screwdriver and Radio Shack s Nibbling 
Tool. 464-823. 


Beyond these six tools, the first four of which 
come from à dental supply house, the rest of my 
regular hand tools are about as generic as they 
come — and yours can be, too. Radio Shack's 
diagonal cutting pliers, 264-1813 are pretty good 
when they're new and sharp, but they'll get dull 
cutting butter. Figure 3-4 shows most of these 
tools and more. The main point here is to pay a 
visit to your local dental supply and use your 
imagination: open up your mind and let your 
fantasies unwind to find excellent electronic uses 
for some of that goshawful stainless steel that 
hurts so much when it runs amok in your chops! 


Dental plaque scrapers make great circuit trace 
cutters as well as scorers for raw printed circuit 
board. I used to saw my PCB’s to size, but now, 
j just lay out a carpenter's square on the circuit 
board and score it a few times with a curved, 
pointed plaque scraper, and then snap the board 
along the score for a clean cut! Thanks to the 
piuque scraper, it's kind of like glass-cutung ~ 
efficient, clean, and quick. 


THE RIGHT TOOLS & MATERIALS 


They re critical to good hacking! For Pete's sake, 
throw away those rolls of black electrical tape and 
duct tape. Same for cellophane and masking tapes. 


Yuk! Sometimes, Scotch 8/0 Magic Tape can be 
useful for wrapping wire bundles, but better still 
are cable ties, heat shrinkable tubing, and short 
lengths of bundling “spaghetti.” 


Anything is better than tape! Never use tape to 
insulate. You can bet your bottom dollar the stuff 
will come undone when you least expect it! Tape 
is uncouth around the Ultimate Scanner! 


Cheek: The Uitimate Scanner 


Figure 3-4: Useful hacker tools 


Top: Power screwdriver and clip-on magnifier. Left-to-right: small hot-glue stick, large hot-glue stick, 
jeweler's loupe, locking dental tweezers, five types of plaque scrapers, curved hemostats, and dental 
scissors that can cut sheet metal! Nor pictured: welding torch, crowbar, sledgehammer, aspirin. 


Tools... a good subject. Yes. I have a few bucks 
invested in good tools of the trade but you know 
what? I use Jess than a hundred bucks worth for 
95% of my needs. 


The following is what I call a good, functional 
tool kit for hacking and chopping scanners. A lot 
of Radio Shack's stuff I don't like, but this list 
will do a good job for vou. 


It's provided to help vou inventory and assess 
your needs. Not evervthing here 1s essential to 
success of your hacking projects, depending on 
vour skills and desire for aesthetics and quality. 
Radio Shack catalog numbers are given ONLY for 
your convenience: better prices and quality may be 
avallable elsewherc. 


Items marked with а * are advisable and very 
useful. ! means almost essentiai. You decide. 


Now here's the crazy thing about it all. You can 
take or leave my list of tools. stuff, and widgets! 
It's not going to make or break you as a hacker. 


There's something else that I can't really give you 
directly; only awaken you to it ATTITUDE! Ап 
ounce of the right attitude wil] go farther than а 
kilobuck worth of tools. 


You've got to PLAN your hack attack, stick to a 
methodology. and be patient. Yes, you have to be 
prepared with the right tools and materials, but 
putting attitude and patience at the top of the list 
wil! help the rest of the list take care of itself. 


If you are a novice hacker. don't outsmart me and 
iake shortcuts. Follow along for a while and get 
used to the taste of success. ! mav seem to take the 
long way around at times. but it's with the BIG 
PICTURE in mind. 


Table 3-1: Recommended/useful materials, tools, and supplies 


Radio Shack Catalogit 


Description (if appropriate) 
Electric drill. 3/8". w/bits to 3/8".............. Anywhere 
Diagonai cutting pliers, small .................. 64-184) 
Locking longnose рпег$........................ 64-1864 
Adjustable wrench, 4" (small) ................. Anywhere 
Precision flatblade screwdrivers ............... 64-1948 
Precision crosspoint screwdrivers ............ 64-1962 

Mini fOrCepS а E 64-1910 
Nibble tool ols: fee lodi edad deret 64-823 

Lighted tape E зук. жузшен 63-848 
Screwdrivers, а5$0Цей.............2............. 64-1823 
Needle file Sel» uke а аана a 64-1985 

IG NILE SEC T 64-1801 

Hot glue gun and glue ѕисКѕ....,.............. Anywhere 
Soldering pencil holder/cieaner ................ 64-2078 
Soldering pencil base тоа 64-2080 
Soldering element ............................... 64-2082 
Sołdering tpS cereus ade то елат 64-2089 and 64-2074 
DesoldennptOol «ce аав нана 64-2098 

Pocket penlight ............................. ‚.... 61-2626 
Disposable butane lighter .................... Anywhere 
Silver bearing solder = uv tbe ent 64-013 
NDOFOSTUDPSOIBS ES docete abet odio dad eet anne 64-005 
Desoldering braid е озунан ананан 64-2090 
"Helping Hands" project holder ............... 64-2093 (Best) 
Mini-vise project holder ao td 64-2094 (Good) 
Cleaner/degreaser solvent ...................... 64-3322 

Rosin (их TEIBOVEt ses carte Do e ac saa e 64-3324 
Double-sided tape Vus oer cot t P Pd 64-2344 

Velcro (hook and loop) strips ................. 64-2345 

EPOXY TESIM Hotte e е аам 64-2313 

PUDET SIUE ИЗ О О О О. 64-2308 
Silicone rabbes вааран 64-2314 
Precision DUDEIGAOE равин 64-2301 CORTINUES... 
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Tools and materials, continued... 
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Standoffs w/scre Ws ----+--+-7---0- 2222022222202 == 276-195 
Perf board мїосК-------------------------з5------- 276-1395 


Machine screws 


Machine nuts 


— — — 64-3010, 3011, and 3012 
eni ed E A gni. 64-3017, 3018. and 3019 


= Flat washers -------------------------------------- 64-3022 
= Стгогате1$----------<----------<----5-------------- 64-3025 
T A" Wire tes ------------------------------------------ 278-1632 
2 Heat shrinkable tubing -------------------------- 278-1627 
* E Digital Vol/OhnyMilliammeter (VOM )-------- 22-194, -184, -185, 


(several choices work fine) 


Dynamite, for difficult cases 


-188, -167, -186 


wan anno tenn anne ane Your neighborhood terrorist, 


HOW TO PREPARE AND INSTALL 
MODIFICATION CIRCUITRY 


I favor the easy ways of doing things when 
possibie. In my early days of hacking I installed 
many a SuperWhizBane modification with 
painstaking effort to make the thing LOOK good. 
and able to withstand earthquakes and atom 
bombs. I don’t do that anymore: it's a waste of 
ume and energy. 


Well. let me qualify that... when I do a hack for 
hire. ТЇЇ spend more time on its aesthetics and 
cosmetics than I do for my own. That's expected. 
Bur. there is a difference between doing your own 
work and work for someone else. 


When I develop and test my mods. it is important 
that 1 have easy access to them, both for 
adjustment and fine-tuning and for removal/re- 
installation. When I do a job for someone else. 
there is not going to be any readjustment and 
relocauon, so [ do it right the first time, based on 
my experience. 


Your efforts are almost always going to be R & D. 


30 it's better to make it easy on vourseif regarding 
ease of access to your hacks. Nothing is worse 
than :о bury the results of a }2-hour effort deep 
into the gizzard of your scanner, only to йла that 
it doesn t work as it should, or it does fine until 
we develop an improvement that requires it to 
come back out for more work. I guarantee that 
vou won't bother to polish your work if it's 


difficult to access and service! Unless we know a 
certain mod is as good as jt’s ever going 10 be. 
let's make it easv on ourselves and dispense with 
rigid professional techniques and conduct 
ourselves more like what we really are: R & D 
shops. This implies certain ways of doing things 
that would never be employed on the assemb!y 
line or by a pro-shop. That's okay! 


HOMEBREW MECHANICALS 


First, I do ALL my initial developments on "perf- 
board" with simple point-to-point wiring. There is 
no sense in making a custom printed circuit board 
only to learn jt needs a layout change to work 
properly. 

Use a perf-board (Radio Shack #276-1394, 1395, 
or 13961. Design your circuit layout on paper and 
cut the perf-board slightly larger than anticipated 
size, stuff in the parts, add the wiring and 
soldering. and let it go at that. 


Rarely do I advocate installing homebrew circuit 
boards with standoffs, spacers. nuts. and bolts. 
That's iust too much trouble, for one thing. an 
for another. 12°» hard to install things that way and 
stil] leave plenty of room for other mods. Besides, 
have vou eve: dritled a hole in you: favorite 
scanner only to have the bit suddenly break 
through and run amok around the circuit board? 
No? Good... and vou don’t want to. either. 
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Even if you're careful, what about minuscule drill 
shavings and metal dust? For hackers. there is a 
better way. 


Feast your eyeballs on Figure 3-5 to learn how 
small modification circuit boards can be easily 
installed in a scanner housing. Most base scanner 
chassis employ a metal frame around the circuit 
boards and other hardware. Even though the case 
slips over or bolts down to this frame, there is 
always a little space on the outside, bottom, and 
top edges of the frame. 


Circuit boards installed as shown in Figure 3-5 are 
held rigid to this frame by the suff, #18 copper 
wire that's soldered to this metal frame and to the 
circuit board. The 818 wire should be tightly 
looped over the top edge of the frame before it is 
soldered to the inside surface. 


If you look closety, this #18 wire also loops 
though holes in the circuit board апа should be 
soldered on both aides of the board to make it 


Figure 3-5: Small circuit board installation 


Solder here 


#18-ga solid 
copper wire 


Serves as both 
an anchor and 


a ground. 
(under board) ~ Circuit САМ Lo ARI bear = - 


stable and 1mmovable. This wire should also be 
connected to the circuit board's ground traces. 


If there is any danget of the bottom side of your 
mod circuit board touching something on the 
chassis or main receiver board below it, then 
insulate the bottom of this board with some hot 
glue, or even a sheet of acetate or plastic cut to 
size and held underneath with silicone rubber or 
hot glue. A single 18-ga "mounting" and ground 
wire will suffice for most home-brew circuits of 
about 2-square inches ог less. Larger boards 
might fare better with two or more of these 
mounting wires, depending. Extra won't burt, but 
one js usually sufficient. 


This method of installing modification circuit 
boards is relatively permanent, yet easily undone 
if ever needed. ft allows maximum utilization of 
the space inside the scanner and facilitates easy. 
clean routing of wires from the board to 
destination points within the scanner. 


Metal Chassis 


and connect all 


board grounds 
to this point. 


The rest of this chapter approaches the nitty-gritty 
with some warm-up exercises and preparatory 
adventures. Don’t skip anything — hot stuff ahead. 


REMOVE THE AC POWER SUPPLY 
FROM YOUR SCANNER! 


First and foremost, I suggest removing any AC 
power supply from the scanner. including 
transformer and power cord — for two reasons: 


пк E 


Solid wire 
soJdered to 
ground trace 
on main board 


(1) to create more “real estate" for present and 
future modifications and (2) to remove the single 
greatest generator of HEAT within the scanner. А! 
their best, AC power supplies are not what you 
could call efficient. This simply means that if a 
scanner is specified to require 20 watts of power 
on which to operate, it’s virtually all dissipated as 
heat, with the majority of it in the power supply. 
As the power transformer heats up. it will warm 
up the scanner around it: 
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Heat is Shiva, the Great Destrover (of 
electronics). Minimize or remove heat for greatly 
extended operating life of components! 


The PRO-2004/5/6/2035 senes of scanners get 
quite warm after only a short period of operation. 
If you don't believe me, touch the top case of your 
scanner after it's been on for a while. 


No, it won't burn you, but it will be considerably 
warmer than room temperature. Nearly all of that 
heat comes from the power supply! Remove the 
power transformer for dramatically reduced heat 
accumulauon and to gain hackable real estate at the 
same ume! 


It is easy to non-destructively test my hypothesis 
regarding excess heat caused by AC operation in 
the PRO-2004/5/6 scanners. These scanners have 
a DC power jack on the rear panel. Connect a 10- 
to-15 volt, 500 mA source of DC to this Jack, 
center-tip positive (+) and shell negative (—). 


Run the scanner continuously for 24 hours and 
you']] not feel significant warmth. Then feet the 
DC adapter or power supply that you're using to 
power the scanner? It may be warm. but that's 
OK: the heat is escaping into the atmosphere, not 
into your beloved scanner! DC power adapters 
and supplies are a dime à dozen. Here's how to 
remove the AC supply in the PRO-2004/5/6/2035 
and, generically, other scanners: 


PRO-2004/5/6: Unplug the AC cord from the 
wall! Remove the case of the scanner. Cut the AC 
power cord on both sides of its entry point 
through the real panel. Use a pair of pliers or 
diagonal cutters to squeeze and remove the plastic 
feed-thru clamp for the AC cord. This leaves a 
hole in the rear pane] that might become useful 
later. For now, cover this hole on both inside and 
outside with tape or a pressure-sensitive label to 
block the entry of bugs, dust, and kids’ fingers. 
Cut resistoc R-801 (inside the clear plastic sleeve) 
from its attachment to the AC lead that goes to the 
power transformer and then cut it away from its 
soldered termination on the side chassis. 


Flip the scanner over for access to the top area and 
cut the two blue transformer leads that go to the 
main receiver board about 0.25" above their solder 
points on the main receiver board, so that vou can 
tell where теу go should vou ever want to 
reinstall the AC power supply. 


Looser and remove the twe nu is and boits that 
hold the power iransformer. 1-801, to the side 
wali of the chassis. and car efully lift tt out of the 
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scanner. This transformer offers possibilities for а 
general purpose power supply as shown in ту 
Vol-2. I wouldn't use it to power the scanner. 
even externallv, because it is underrated for 
seriously hacked scanners. You'll want to power 
your PRO-2004/5/6 with something rated at 
12VDC @ 1 amp or more. 


The DC Power jack on the rear of the PRO- 
2004/5/6 takes the same size coaxial power plug 
as what's on the end of Radio Shack's #270- 
1533, “Standard 12-VDC Fused Cord." ln 
fact, you can buy this ready-made cable, cut off 
the cigar-lighter plug, and use the cable and 
coaxial power plug between your external DC 
power supply and the scanner! 


The important thing here is to get the right size 
coaxial power plug to mate with the DC power 
jack on the rear of the scanner, and be sure it is 
correctly connected: center-tip positive (+) and 
shel] negative (-). Add an in-line fuse of ] or 2 
amp rating to put a polish (and a bit of safety) into 
the project! 


ALL PRO-2004/5/6 NOTE 


There is one other thing you ought to do while the 
scanner is open, if vou're in the mood. Inside the 
scanner, just in front of the DC power jack, is a 
series limiter resistor, (PRO-2004 calls it R-256. 
ІО, 0.5 W. PRO-2005/6 have R-249, ТО, 0.5W. 
PRO-2035 has R-223, 10, 0.5W) 


The function of these current-limiting resistors is 
to act as fuses. and they DO BURN OUT when 
the scanner has been extensively modified and 
then powered with an external DC supply. 


The resistor is rated at 1 ohm at a half watt. 


Power equals current squared times the resistance. 
Therefore, 707 mA will hit the maximum rating of 
the resistor as shown in the following 
relationships. Actually, this is pushing it a bit, 
because I have seen these resistors burn out in 
unmodified scanners with a current of around a 
half amp (500 mA). 


When a modified scanner is powered by external 
DC. this resistor tends to run hot, and I suppose 
the elevated heat eventually takes its toll. It doesn't 
take much io solve the problem before it happens. 


This wii! help. both now and jn similar situations 
when a bit of math ts required. Make a separate 
note of it and keeo it handy... 
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If you're smart right about now, you'll take one of 
three options: (1) solder a jumper wire around this 
series limiter resistor to bypass it from the circuit: 
or (2) solder another 19, 0.5-watt resistor in 
parallel with it. or (3) replace the stock R-256 or 
R-249 with a larger 1£2, 2W resistor. Any of these 
three options will effectively eliminate this area as 
a potential trouble spot. 


Choose one. f favor Option 1. which is easily 
done by crusbing the resistor with a pair of dikes 
and then soldering a jumper wire between the 
exposed leads. This elimmates the need to remove 
the main receiver board as might be necessary 
with either of the other two options. 


Take your choice, but do something with this 
resistor before it fails at exactly the wrong time. 
You know Murphy's Law as well as I do... 


DC POWER FOR OTHER SCANNERS 


If your scanner has an external DC power jack, 
then follow the guidelines given above for the 
PRO-2004/5/6/2035 scanners. If your scanner 
does not have a DC power jack, and many don't, 
you can still remove the AC power supply and run 
on external DC with only a little more work. 
Here's how (and why): 


Modern scanners employ internal voltage 
regulators to control the necessary voltages for 
various portions of the scanner circuit. These 
voltage regulators, typically --5V and +8V, are fed 
with some higher DC level, usually 12V, but it 
doesn't really matter. 


You see, voltage regulators are uncaring about the 
feed levels so long as its a few volts above the 
intended output. A +5V regulator, for example, 
will produce a nice and stable +5V for any input 
of +7.5У or greater. 


It is pretty much standard for 12V to be the main 
feed to the scanner's voltage regulators so all you 
have to do is find that +12V feed point on tbe 
output of the scanner's AC power supply and 
you're in business. 


Figure 3-6: Typical AC/DC power supply for most base scanners 


Ird wire ground in &olled 10 Ground 


the metal chassis. 

(Green wira an AC plug] 
NOTE: 3wire AC is not very 
common in scanners, but 


ia shown for dority s sake. 


AC 


Cut low vollage AC leads 
at poinis "X". 


11-16 УОС 
To laput of 
scanner's 
regulalor 
circuils 


470-,F/25-v 
to 
2200- uF 


Jus! add an RCA jack or other simple phone jack to 
the rear chassis of your scanner; conned os shown. 
Feed an external source of +1 2v to +1 Sv 10 Ihis jack! 


The 1N5400 diode proleds against reverse polarity. 
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Remember one thing. however. If your wall-plug 
tranny produces too high a voltage, and the 
regulator has to reduce it to the required working 
voltage. there's a potential problem (pun 
intended). 


For instance, reducing 24V to 5V (a 19V drop) in 
a 100тА circuit dissipates almost 2W. which 
might be outside the capacity of your voltage 
regulation circuit. Stay conservative unless vou 
know exactly what you’re doing 


Using Figure 3-6 as a guide, follow the AC power 
cord into the scanner. You'll see where it runs into 
the primary side (high voltage side) of a power 
transformer. The secondary (low voltage side) of 
the transformer will have two or three leads going 
to the main circuit board. 


Somewhere in the immediate vicinity of these low 
voltage leads will be a bridge rectifier and a 
healthy-sized filter capacitor. usually 470UF or 
larger. 


It vou measure the voltage at the (+) leg of the 
filter capacitor. vou should see somewhere 
between +11 and +16 volts. 


Thai's where you will tie an external DC feed after 
removing the AC power supplv. The best way is 
to install a convenient phone Jack on the rear pane! 
— I prefer simpie RCA phone Jacks. Solder the 
anode of a 135400 diode to the center lug of the 
jack. Solder the cathode of the diode to a point 
on the output of the bridge rectifier, and connect 
the feed to the On/Off switch of the scanner. 


If the chassis of the scanner is ground, then 
you re done; if the power jack is installed in a 
plastic panel, solder a wire from the sbell of the 
new jack to any convenient scanner ground. 


TEST EQUIPMENT 


Things change. The cost of a given function has 
really dropped since J wrote my first books, and 
new capabilities such as virtual instruments (КЕ 
cards that use the PC as a platform) have hit the 
market. It gets easier every дау... 


Radio Shack has added new multimeters to their 
ursenai. Including an upgraded version of their 
benchtop model. 422-175. Another mode! 1 really 
like is their 822-182 Multimeter with PC Tnterface' 
The 1995 model is 822-168. 


Indeed. à simpie connecuon to a segal port 
(COM i or COM2: on your computer allows 


automated measurements апд data acquisition! 
Great software comes with this meter, including 
the necessary serial cable to connect to your 
PC/compatible computer! Automated operation 
consists of flexible setups and variable periodicity 
of measurements wth outputs logged to a plain 
ASCII text file for subsequent use as desired. 


Two fields of data are outputted to the text file: 
time of measurement and value of measurement. 
The two data fields are delimited (separated) by a 
goofy ASCII character (decimal 028, hex 1C), 
between the columns of time and data. 


Why Radio Shack didn't use either a tab or a 
comma for the delimiter is beyond me, but 
fortunately most text editors and word processors 
have a quick replace function by which this 
character can be replaced with a comma. 


] mention this because a database manager makes 
quick work of processing volumes of accumulated 
data. but that ASCI 028 character wil! first have 
to be replaced with a comma in crder to import the 
raw file into a database. Radio Shack « Multimeter 
with PC Inierface (#22-182) 15 great for taking 
hands-free. automated measurements while you're 
busy with other things. 


Mv personal experience is with the 1994 model, 
but I've looked at the 1995 software and found it 
to be a work of art! It's backwards compatible 
with earlier hardware, and supports Windows. 


FREQUENCY COUNTERS 


Radio Shack recently added a handheld frequency 
counter to their arsenal, but don’t go running 
down there to buy one. Salt away your hundred 
bucks and check out what you can get from 
Optoelectronics or StarTech. You'll get a much 
better counter for the same or only a little more 
money. 


Speaking of which, hobbyists can really be weird 
when it comes to gizmos and gadgets. A lot of 
people now think you can just lug around a 
frequency counter and lock onto all sorts of 
frequencies. Those who believe that are wrong... 


A frequency counter will not lock onto and display 
a frequency unless it can get enough signal to 
uigger the counting circuits, which will be usually 
be somewhere between LOmV and 100mV. 


fn a word, that means vou have to be pretty close 
io the transmitter. no matter лом’ powerful it is. in 
order to get a jock for a stable readout, 
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Typical ranges. їп actual practice, come to about 
20-40 feet for handheld transceivers used by 
security guards and stadium ushers to SO feet or 
so for mobile radios. Even base radios won't 
trigger a conventional counter beyond 100-300’. 
With a lot of work. plenty of experience, and 
some extra time on your hands. you can build up a 
specialized antenna and wideband preamp to feed 
the input of your counter to extend its range. 


Unfortunately, if you buy a frequency counter to 
puli secret frequencies right out of the air, you'll 
be disillusioned. Frequency counters have their 
place, sure enough. but usually in the lab or shop 
for direct measurements, in-circuit. The more 
astute and experienced hobbyists will have good 
uses for them, but save your money until vou 
know what you're doing. 


Besides all that... a (requency counter does not 
necessarily read out the exact frequency of a 
signal. Much depends on the accuracy and 
stability of the counter' s internal circuits. Most 
hundred-dollar counters are neither accurate nor 
stable. If vou try to adjust the master oscillator of 
à receiver or transmitter using a cheap frequency 
counter as à readout, you'll probably do more 
harm than good. See just ahead under Precision 
Frequency Standards. 


ADD A HOLD FUNCTION TO THE 
RADIO SHACK RF FREQUENCY 
COUNTER 


Get the service manual for Radio Shack's 
Frequency Counter (by calling 800-442-2428). 
and follow these directions. 


Figure 3-7: RF detector probe ~ schematic 


Locate ТР 17 ~ in the schematic, its pin one of 
U3, connected to +5V thru a 47К resistor. On the 
circuit board, TP17 is on the display side, just 
right of the lower-right corner of the IC. 


Grounds are about 1/4 inch below and to the right 
of the three non-tinned points in the large area of 
metal. TP17 is the tinned pad next to a chip 
resistor marked '473' for 47k. 


Rig a momentary push button switch that, when 
pushed, grounds TP17 thru a ІК resistor (you 
never can tell) and it works just fine! 


Drill à small hole to mount the switch just above 
the plastic depression to permit access to the 
button with your right thumb. A small toggle 
switch will fit if you want to HOLD readings 
indefinitely. 


Now let's make some useful test equipment for 
Shop and shack. 


RF DETECTOR PROBE FOR YOUR 
MULTIMETER 


Here's a slick hte project for dedicated radiotsts. 
trom hams to CB'ers; from SWI.'s to scannists; 
and from engineers to technicians on a budget. 
The keyword here is b-u-d-g-e-t. 


Electronic test equipment can be very expensive 
but my RF VOLTAGE PROBE will cost very 
little, if anything. 


You might already have everything you need lying 
around your shack. So what’s an RF voltage 
probe? Take a Jook at Figure 3-7. That’s a simple 
one, and a very handy tool 


| Probe Body 
Shielded d Ww ; 
Cable QOtuF  - 
Output Tul M 3.9-M W D р , 
To * Probe Tip 
Meter ee 
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Figure 3-8: RF detector probe - mechanical layout 


Canbea 
Sround Perfboard Capacitor oy Bulb Bose 
Strap we RENE ОЛ ү (Ground) 
4 Typical RF Probe ja Aces 
Mechanical Layout E i Me 7 ^ 
ie Ura | 
Metal 7 | 
RG-58 Bodvy Plastic insulator 
Coax Ground Wire Metal Probe Tip cry 
can be a stout 
sewing needle 
In a word. an RF probe ty a "detector : a simple 


стест that samples radio frequency energy und 
converts It to a DC level that’s proportional to the 

a:xipinude of the original RF signal. What's neat is 
thai the output of this RF prohe can be measured 
with almost any high impedance volumeter! 


GOOD ENOUGH?? 


Unless vou have to take measurements down to 
the millivolt. my simple RF probe will satisfy 
virtually af} needs. even of professionals. who 
rarely need more than an indication of RF and not 
so much absolute values. RF voltages can be 
extremely difficult to measure by the hobbyist. 


and the process usually requires costly equipment. 


Yet, we're going to crash some barriers with old 
technology - an old circuit. and a slick way of 
putting it all together! Figure 3-7 shows the 
Schematic diagram of the detector. Figure 3-8 
depicts the mechanical solution. 


This project gets really convenient if you convert 
the body and Bght bulb of a pocket penlight, 
typically Radio Shack’s 3161-2626. The only part 
of this flashlight not used is the push-button end. 
and the internal spring "guts" of the penlight. 


The metal Боду of the penlight serves as а 
shielded housing for the detector circuit and 
something to grasp when making measurements. 


Н vou use the penlight as the basic Pudding block, 
then first remove the push-button end and the 
spring inside. E s J) mst push out through ihe 
lube if you a fute force. Nets. unscrew the 
lamp bulb from the white piastic head and 


-ї— ————————_————————— 


Rubpe: Band 


Ground Lead 
(Brard| 


carefully break the glass and clean out the shell 
without damaging the threaded brass Dase. 


As the probe tip. get a stout sewing needle or 
something comparable and solder jt to the center 
conductor of the bulb's threaded base from inside 
the shell. so the point sucks out in the same 
direcuon as the glass formerly did. 


Fill in the hollow base of ihe bulb around the 
ncedle with epoxv or hot glue to give mechanical 
strength to the assembly. Screw it back into the 
plastic head. Finish up that part of the operation 
by filling in the rest of the white plaste head with 
either epoxy or hot glue. 


Then solder one shortened lead of a 0.001 UF 
capacitor to the outside (back side) of the center 
conductor of the butb’s threaded base. It might be 
wise to solder the lamp shell to the metal ring that 
holds it inside the white plastic head. Also solder a 
short ground wire to the lamp shell and let it hang 
free for the time being. 


Build the simple detector circuit in Figure 3-7 on a 
narrow piece of perf board that can slide down 
inside the metal tube. Insert a 3' section of RG-58 
or RG-59 coax into the hole left by removal of the 
push button. 


Prepare the end of that coax so that the center 
conductor can be soldered to the back end of the 
resisior (DC OUTPUT) and the shie)d of the coax 
to the ground on the board. Solder the free end of 
the 0.001 uF capacitor te the junction of the diode 
cathode and the front end of the resistor (RF 
INPUT). Solder the tree hanging ground wire 
from the tarnp’s shen iabove` to the ground trace 
nthe perf board. 
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ASSEMBLY 


Carefully slide the whole assembly into the tube 
and gently screw the white head into the metal 
tube, On the distant end of the coax, install a 
connector to mate with the matching connector of 
your high impedance voltmeter. It's usually a 
dual-banana plug, but this can vary from one 
meter to the next. That's up to you. 


Assembly of tbe RF probe is not particularly 
cntical, but if vou plan on measuring RF much 
above 25 MHz or so, you should keep leads very 
short, especially those of the capacitor, diode, and 
the front end of the resistor. Nothing is very 
important from the back end of the resistor down 
through the coax. 


If you want your RF probe to be more accurate, 
then use a precision (1%) resistor. Check the 
specs of your meter: most have an input 
impedance of either 10 MQ or 11 MQ. If 10 MQ, 
use a 3.9 MO resistor. If your meter has 11 МО 
input impedance, then select a 4.7 MQ resistor. If 
vour meter has some oddball input impedance 
other than 10 MQ or 11 MQ, then select a resistor 
approximately 35% - 45% of that value. Nothing 
to it, actually. The resistor converts the peak-to- 
peak value of the RF signal to a DC RMS value. 
generaily more useful than Р-Р. RMS equals 
0.707 times P-P, and P-P voitage equals 1.414 
times RMS voltage. 


Connect your RF probe to any high input 
impedance DC voltmeter - that's virtually ALL 
digital voltmeters. bv the way. The output voltage 
of the probe is at a posiuve DC level, and the 
voltmeter should be set accordingly. 


The RF probe can oe used as a signal tracer апа 
gain anaivzer, as weil as an RF voltage measuring 
device. li can also be used as a general purpose 
RF detector for emissions up to around 100MHz 
or so, and its great for hidden transmitter hunts 
and debugging operations! 


Its sensitivity will be enhanced with ап "antenna" 
connected to the probe tip, if you're sampling 
signals from the air. You can also connect an 
antenna to the input of a wideband RF preamp and 
then sample the output of the preamp with the RF 
probe for even greater sensitivity! When a preamp 
is used for this purpose, it would be well to 
connect а 50Q resistor across the preamp's output 
to simulate the 50Q input of a receiver. Because 
this probe is designed primarily for RF 
applications, signals below 10,000 Hz will read 


low. Forget the RF probe and use the AC section 
of the voltmeter for frequencies below [0 kHz. 


APPLICATION EXAMPLE 


If your receiver is not functioning properly, the 
RF probe can be used as a signal tracer. First, 
connect the probe to the output of the last IF. stage 
and note the amount of RF energy present tere. If 
no indication. move the probe back to the input of 
the last IF stage and observe the meter again. If 
still no indication, move the probe to the output of 
the previous IF stage and, if necessary, keep 
going forward toward the RF input in this step- 
by-step manner. 


When RF energy first appears, look for a problem 
in the following circuit. Local oscillator operation 

can also be checked, by touching the probe to the 

oscillator. 


The probe sensitivity is limited by the sensitivity 
of the voltmeter, so it is unlikelv that vou will 
obtain satisfactory measurements in the RF and 
mixer stages of a receiver where signals are in the 
microvolt range. 


The RF probe will be good for signals of a couple 
millivalts (0.002 V) up to the break-down voltage 
of the diode (30V). Use this procedure to check 
RF or IF amplifier gam. Write down the readings 
obtained and divide the output voltage by tbe input 
voltage. 


The answer you obtain will be the gain of the 
stage or stages. RF voltages trom transmitters can 
also be measurcd, if ihe ratings of the diode are 
not exceeded. 


30 volts P-P will be about maximum for a single 
diode. tf your needs for an RF probe include 
transmitters above [5 watts, then use two or more 
diodes in series to extend the ratings. One diode is 
good for 15 watts RF, two for 70 waits. and three 
for 150 watts. 


Nope - that’s no error. Remember the math 
regarding the relationship between voltage and 
power? Depending on the voltage rating of the 
0.001 НЕ capacitor, high DC voltages can be 
safely connected to the probe as long as the 
superimposed RF voltage does not exceed the RF 
voltage limit of about 30V P-P per diode. 


For measurements in circuits where the RF 
frequency is lower than 25 MHz, the ground lead 
length and position are not too critical. 
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For measurements of higher frequency signals, 
(he frequency response of the probe can be 
maintained “flat” by securing the ground lead 
firmly to the probe body with a rubber band. This 
provides a short length ground return with low 
inductance. 


The RF probe is an indispensable tool around the 
serious monitoring shack. It can also be useful as 
а "bug" detector, but you'd want to practice up 
using it for that purpose to determine its 
limitations and exceptions. 


A short length of wire on the probe tip will serve 
as an antenna to detect RF fields from bugs and 
low power transmitters, but practice with it using 
a cordless telephone to determine range and 
sensitivity. 


OSCILLATORS, SIGNAL GENERATORS 


Signal generators are costly, and cumbersome to 
lug around. You can, however, rol} your own into 
à cubic inch or less for next to nothing provided 
you don’t mind a lack of frills. a little work, 
modest performance, and serious ugliness. 


The gizmo I have in mind is a basic crystal 
oscillator that will accept almost any type of quartz 
crystal over a very wide range of frequencies. А 
handful of crystals will yield a perfectly functional 
signal generator that can be used to evaluate the 
performance of shortwave and scanning receivers, 
as well as antennas. The oscillator can be the 
emitting device for hidden transmitter hunts. Add 
a few extras for an FM wireless microphone. 


An oscillator does the same thing as a guitar string 
when plucked; or a piano string when struck: it 
oscillates or vibrates at a precise and relatively 
stable, consistent rate, 


Like musical strings, an oscillator can be tuned or 
adjusted. Unlike musicai strings which vibrate at 
audio rates. our oscillator vibrates at radio 
frequencies, from maybe as low as a few hundred 
kHz te 100 MHz or higher. 


Our oscillator will be coarse-tuned or “adjusted” 
bv choice of the crystal. Each crystal can be 
“trimmed” or finely tuned by means of a smal} 
trimmer capacitor. There's nothing much to it; a 
crystal, a transistor, and a few parts. 


One benefit of the cheap oscillator in Figure 3-9 is 
that not only will it put out a healthy signal on the 
fundamental frequency, but also plenty of 
harmonics up to the 8th to 10th or thereabouts. 
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Normally this is not good; signal generators are 
supposed to produce just the frequency to which 
they are tuned, but ours is so simple (on purpose) 
that it puts out eight or more odd and even 
muluples of the crystal frequency. 


Then, depending on the type of crystal. it might 
also put out subharmonics of the crystal frequency 
as well! Again, this "shoddv" operation is not 
normally considered good, but for our purposes, 
it means a number of test signals will exist in the 
output at the same time. That means you can test 
vour shortwave receiver and scanner across fairly 
wide bandwidths without changing crystals. 


BUILDING. YOUR OSCILLATOR 


Construction of the test oscillator 1s not critical, 
but for best operation with the most harmonics. all 
components should be close together with short 
interconnecting wiring. The test oscillator is 
powered by 9V, but the supply can probably vary 
from as low as 5V to as high as 12V or a little 
more. Just be aware that the frequency will change 
as the voltage changes, which ts not good even for 
our lest purposes. 


For portable operations and transmitter hunts 
(they're a lot of fun... ever try one?), I prefer to 
power my test oscillators with two 9V batteries, in 
series for 18V, and fed to a 78L09 or LM-317T 
regulator to set the voltage to a regulated 9 volts. 
РЇЇ leave the oscillator's power to you, but my 
design is 9V. 


WARNING: Depending on how you configure 
and use the test oscillator, its operation could be 
illegal. The FCC imposes a limit on the effective 
radiated power, which involves both amplification 
and antenna configuration. 


Regulations tend to change periodically, so check 
first before you go hog wild with sophisticated 
antennas and power-increasing design 
techniques. The transistor can self-destruct if you 
draw too much power from the oscillator. 


Caveats out of the way, let's build it and have 
some fun. 


Refer to Figure 3-9: perf board assembly, with — 
point-to-point wiring and soldered connections, Is 
fine. A crystal socket facilitates easy swap of 
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civstals as desired. That's how the fundamental 
frequency is set, of course. 


^ socket for the transistor is nice in the event you 
destroy one during setups and alignment. 


THE MECHANICALS 


The assembled board should be installed in a smal! 
metal box for shielding and isolation from sudden 
temperature changes. The metal box always 
should be grounded to the ground traces on the 
board. 


A BNC jack can be installed almost any where 
convenient on the box to facilitate the connection 
of an antenna. which should not be longer than 
about 10" to keep operation legal. If you live near 
me, make that a maximum of 5” or so. 


Use a DC adapter, and a corresponding DC jack to 
input power. Install battery clips to hold the one or 
two 9V batteries for portable operations. The 
trimmer capacitor can be most anv mini-tunable 
{уре with a maximum of not more than 100-200 
oF and а minimum of 10-15рҒ or so. 


ADDING VOICE 


If vou need a low power voice transmitter, the 
trimmer capacitor can pe subsntuted with a 
varactor diode. 1t is beyond the scope of this 
section to dwell on how to choose the best 
varactor diode. but ihey are cheap enough that trial 
and error of a few wii! produce a nice sounding 
voice transmitter. 


Add a 4704 H (micro-Henry) RF choke to the 
junction of the crystal and the varactor diode and 
feed a preamplified audio signal to the other end of 
the choke. The output will be narrow-band FM. 
so this unit might make a nice wireless 
microphone if you use ingenious mechanical 
packaging. 

The peak-io-peak value of the modulating audio 
signal will determine the FM deviation of the 
carrier. and something on the order of ІУ P-P. 
will probably be required. 

This means the audio signal should come from a 
gàin-adjustable preamplifier so you can set the FM 
deviation to about £3 kHz. 


USING IT 


The oscillator is great for testing and evaluating 
antennas, t00! A portable version a hundred feet 
from the antenna under test will produce a real-life 
signal without bothering a soul anywhere else. 


The antenna can then be trimmed, tuned. and 
adjusted for optimum performance on the desired 
frequency using your receiver and S-meter as 
visual/aural feedback instruments, 


The Low-Cost All-Purpose Oscillator emits a 
range of signals as multiples of the crystal 
frequency. For example, if you select a 20 MHz 
crystal, you can expect to find signals at 20, 40. 
60, 80, 100, 120, 140, and possibly even 160 
MHz and above, but all at 20 MHz intervals (they 
are harmonics, right?). 


You might also find subharmonics at 10, 5, and 
2.5 MHz. "Overtone" crystals tike those used in 
older CB radios demonstrate this characteristic. 
The once-popular 23 MHz and 37 MHz series 
work great. 


So, you see. the Low-Cost All Purpose Test 
Osciilator makes a handy instrument for your 
bench. This simple. low-cost. design is good for 
other things. 109% .. 


OSCILLATOR PRANKS 


I beard this story from the golden days of CB in 
the Jate ^70s. The “good guys" in Springfield. 
Missouri, whipped up one of these oscillators and 
carefully tuned jt io a “bad guy's" home channel 
The "bad guy” called himself "Cookie Monster." 
but everyone else called ‘im “Turkey Monster.” 
You catch my drift here... 


The gizmo was sealed into a jar with a fistful of 
batteries to last several weeks, and a 2-3 ft antenna 
wire was fed through the lid. The Jar was buried 
50 yards from Turkey Monster s house, and the 
antenna snaked under leaves and grass. so that for 
wecks, the poor fellow was unable to hear 
anything on his favorite channel, thanks to the 
dead carrier. 


The oscillator has many uses, obviously. Put it to 
good use, and test vour receivers with it; not those 
of other people. 


Unless they really desetve it... 
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Figure 3-9: All-purpose test oscillator 


NOTES: 


. The crystal is not critical, but probably should not be 
lower than 1 MHz, nor higher than 50 MHz. 


. An optimum value may be as high as 1100-ohms. Use 
of a 2-k trimpot is suggested to determine best value. 


3. An opumum value may be as low as 4000 ohms Use 
of a 100-k trimpot is suggested to determine best value 


4 The tnmmer capacitor should have as wide of a "swing" 
or tuning ratio, max to min, as possible. The high end 
will not adversely affect the oscillator's operation, but 
oscillations may stop as the trimmer is adjusted toward 
the minimum end of the range 


E 


N 


gi 


Ground traces and connections are shown in 
heavy black lines. АЛ grounds are 
interconnected. 


Audio In 


SM 


100-pF 
Adjusts freq +/- 3KHz 
Notes 4 & 6 


Note 6 


6. Substitute a varactor diode for the tnmmer capacitor if 
NFM-voice is desired. Add 470-uM RF-Choke as shown. 


PRECISION FREQUENCY STANDARDS 
,.YOU MAY ALREADY OWN ONE! 


If you own a PRO-2004, PRO-2005, or a PRO- 
2006, then you're sitting on a precision frequency 
standard, so you may as well put it to use to 
upgrade the capabilities of your shop and shack! 


Everything in RF today is crystal-based, and the 
accuracy of the crystal determines the performance 
of the communication channel, so its important to 
have a good, stable, and accurate reference in your 
shack There's one inside each of those units... 


If vou don't own one of these scanners. ГЇЇ show 
vou how 10 эишКе a precision freavency standard 
sinular то the one inside them! 


C + 9 volts 


ОЛЧЕ |+ 


NPN | 
2N3904, 2N2222A, etc ` 


Antenna, 10" 


0.001-uF 


| Note 2| 
330 


C Ground 


A SPECIAL ADJUSTMENT IN THE 
PRO-2004/5/6 


To date, we have paid lots of attention to the 
"brains" (CPU) of the PRO-2004/5/6, but nothing 
has been said about its Reference Oscillator. It's a 
sorta secret, but ГЇЇ show you where to look. 


Referring to Figure 3-10, open your PRO- 
2004/5/6 Service Manual to the schematic diagram 
for the PLL Section. 


Hunt up IC-301 (PRO-2004) or IC-302 (PRO- 
2005/6). Next find Pin | of that chip, an 
MC145158. Follow the trace from Pin ! and it 
will run directly to a nondescript 10е gizmo called 
^DX-301." 
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I'll bet you never noticed it before, or dismissed it 
as unimportant. The Service Manual pays it no 
attention and pretty much leads you to believe that 
it is Just а 10 MHz crystal. It's not mentioned in 
the Alignment Instructions. ether. 


Oh, but this litte puppy 15 more than just a crystal. 


measuring t&mm x 8mm x [Отт high. X-301 
contains a crystal. a transistor, and a few other 
components and is marked TEW or TX-1824, 
with various suffix letters. X-301 has a little hole 
on top of its metal housing, sealed with a small 
square of clear tape. 


Inside that hole is an ADJUSTMENT! For Pete's 
sake. LEAVE TT ALONE или you learn what it's 
for, what it takes to tweak it, and what will 
happen if you screw it up. 


Figure 3-10: X-301 in the PRO-2005/6 


REF OUT 
Frequency 
Counter 
Here! 


14 121110 3 
IC30? WC1 49258 


12 201 in PRO 2004 


§ 5 Б 


X361 nthe PRO 2035 


H B 


= is a 12 MHz version of ` 
pethis device. The. WWV 
2 calibration procedures 
^M in this chapter will not 

[^J apply to the PRO-2035. 


NOTE: This circuit as 
shown is for the PRO-2006 
and PRO-2005, but is 


fundamentally the same 
as in the PRO-2004 


+5v 


THE SYSTEM CLOCK 


You know how important the scanner s CPU is? 
Well. X-301 is just as important if not more so. A 
brain without a heart is about as useful as feathers 
en a lizard. X-301 9s the system “ticker” but we're 
not supposed to know абси: ic for good reason! 
X-301 is the Master Reference Oscillator for the 


scanner, It's vital to run at exactly 10.000000 
MHz give or take maybe 10 Hz (Ippm, or one 
part per million), 


THE MAGIC SCREW 


That's what the ADJUSTMENT is for and there is 
absolutely NO WAY to correctly adjust it without 
the proper tools and equipment. 


I wouldn't even tell you about X-301 except for a 
wonderful use for it that ТЇЇ get into a bit later. But 
since І have mentioned X-301. then I'm obliged to 
tell the whole story, so bear with me. 


X-301 has to run at an exact frequency or else the 
scanner won' tune properly; kind of like the 
timing of your car's ignition. That 10 MHz does а 
number of (hing in your scanner, one of which is 
to get multiplied up to around 600 MHz for use as 
the first IF injection frequency. So a 20 Hz error 
at 10 MHz. multiplied by 60 becomes a 1200 Hz 
error at 600 MHz. 


Not bad. but not good either. The fine razor's 
edge of your scanner's performance can be lost 
with errors in excess oi 10 Hz. At errors of 40 H7 
or more, it's sunk! 


Now here 1s WHY Radio Shack doesn't tell us 
прош that adjustment. Say vou have a frequency 
counter (aimlessly adjust X-301 without one, and 
vou re hopelessly mired). With one, you're 
dangerous! A frequency counter has its own ume 
base, or crystal reference, and if it's to be useful 
in this situation that counter's time base must be 
more accurate than the scanner's reference you're 
trying to adjust. Few are. 


Your frequency counter is no more accurate than 
its time base, which in most hobby grade counters 
is pretty sloppy. and that's true for some 
inexpensive counters, too. I'm saying that you 
can't uust your frequency counter to be as 
accurate as required for X-301 adjustments. In 
fact, X-301 is probably more accurate and stable 
than most frequency counters you're likely to own 
as a hobbyist! 


Let's put it this way: I have several frequency 
counters: some good and some so-so, and I dont 
trust any of ‘em without first checking its 
calibration. 


That's because the time base in each one can drift 
throughout the course of a бау, and is different 
when it’s first turned on than it is when it's been 
running for a while. 
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Your counter drifts. тоо, апа probably worse thar: 
mine. Even if vour frequency counter is within 26 
Hz at 10 MHz паі 5 two parts per million). Ws 
worthless for adjusting Х-301: 


ADJUSTING X-301 


Now І ат going to undo almost everything 1 ius! 
said by showing you HOW to adjust X-301. 
There are some restrictions. Read 'em and heed 
‘em. First, the toot necessary to adjust X-301 
can't be found just anywhere. In fact. I don't 
know where to find the PROPER tool. 


The adjustment in there is a little weird, but the #4 
flat-blade screwdriver in Radjo Shack's Precision 
Screwdriver Set. #64- 1948. will get the job done 
if you're gentle and careful. 


Nothing else will work that I know of without 
damaging the adjustment head of X-301. and if 
you do that. you're dead in the water. 


WWV — TAX MONEY AT WORK! 


Now that youre armed with the right tool. here's 
how to bring the United States National Bureau of 
Standards into your shack. You'll need a 
shortwave receiver capable of receiving WWV at 
10 MHz. As you may know, WWV in Colorado 
and WW VH im Hawaii each broadcast a 10 MHz 
standard frequency along with Time of Day and 
other standard parameters. 


We'll use their 10 MHz RF carrier because и 15 
certified to be accurate to within one part in 10". 
We will use the most accurate radio frequency in 
the world to calibrate X-301. You can't beat that 
with a stick! 


Now tune іп WWV or WWVH at 10 MHz and 
make sure you get a fairly decent signal. At certain 
umes of the day, it may fade or be hard to detect. 
If so, wait for a better time. because you have to 
have a stable. clean WWV signal. 


A little noise won't hurt, but you better be able to 
hear the voice announcements each minute and the 
tones in between the minutes. 


Assuming that vou have a decent МУУ signa] 
available, pop the case on your scanner and locate 
the PLL sub-chassis on the bottom side of the 
PRO-2004/5/6 Pop tne cover off the shielded 
compartment that contains X-30{ and take a 
moment !c famultarize yourself with everything 


| 
| 
! 


vou nsed io know. Idenufy X-30! and the [6-pin 
MCI43158 спр. 


see Figure 3-11 where X-301 for the PRO-2004. 
and its surrounding circuit, are shown in great 
detail, It closely resembles X-301' s circuit in the 
PRO-2005/6. The MCi45158 chip is IC-302 in 
the PRO-2005/6 and IC-30] in the PRO-2004. 
Then iocate Pin 14 of the chip, the buffered 
Gsolated} 10 MHz output of X-301. Interesting 
(and useful) that the Pin 14 Reference Output is 
not used by the scanner. Therefore we can use it 
without affecting anything in the scanner! 


With your SW receiver tuned to WWV at 10 
MHz, touch the end of a short 6-12” insulated 
wire to Pin 14 of the MCI45158 chip. 
Immediately you'll note a different sound out of 
the nearby shortwave receiver! That's because the 
10 MHz signa! from X-301 will radiate from the 
wire and be picked by the SWL receiver, and 
mixed with the МҮМ signal. 


It will be helpful if your receiver has an S-meter 
for a visual indication of what's happening. too. 
We will use this "sound" and the S-meter, if your 
SW receiver bas one, to adjust X-301 more 
accurately than any frequency counter reliably 
could!!!! If the signal from X-301 totally 
overrides WW V's signal on your receiver, cut à 
few inches off the wire that touches Pin 14. The 
idea is to be able to hear (and see) both WWV and 
X-301's signals at the same time at about the same 
strength, give or take a litte. 


BEAT FREQUENCIES 


Now, pause for a moment to get a clear picture of 
what we're about to do. 


Get someone to gently whistle a very steady tone 
at about | kHz, and then you do the same. Have 
the other person hold their tone very steady while 
YOU adjust yours to match theirs. As your tone 
comes close to the other's, you'll "hear" a flutter 
or warble, which will slow down the closer the 
tones get to matching, and which will speed up the 
farther away they get trom a match. 


That flutter is a “beat frequency." or the difference 
between the two tones. If your tone exactly 
matches the other, there wil! be no warble or 
flutter and the two tones will "sync" in an 
indescribable sort of a way. You'll see what f 
mean with a little practice. This process 1s called 
"zero beating" or “heterodvning.” 
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Back io WWY, tne scanner, and X-301... WWV 
transmits a very high quality 10 MHz signal, and 
X-301 generates (“transmits”) a signal pretty close 
to that. but not as close to a perfect 10 MHz. You 
will “hear” the difference between the two by 
listening to the receiver as the wire is touched to 
Pin 14 of the MC145158 chip. If your SW 
receiver has an S-meter, so much the better: watch 
it as you listen to the sound. 


TUNING 


Peel away one corner of the tape that covers the 
hole in X-301. Gently tweak X-301 a fraction of a 
turn in one direction; instantly you'll hear а 
difference out of the SW receiver. [f you went the 
"wrong" way, that difference will “speed up." if 
you went the right way, it will "slow down." 


lf you're watching an S-Meter, it will jiggle faster 
when you tweak X-301 the "wrong" way and 
siower in the "right" direction. Now tweak X-301 
in ihe "right" direction slowly, and a bit at a time, 
while listening to the SW receiver. 


When you get X-301's frequency to match WWV., 


vout know it, The "effects" will slow down to 
zero. Tweak X-301 back and forih a few umes to 
see what I mean. You just kind of "rock" it in until 
things are right. It's tough to describe, but you'll 
know when it's right. And, when it is, X-301 wili 
be within | or 2 Hz of WWV's 10 MHz. That's 
your objective; to get it "rient on." 


During this process, you might occasionally 
remove the wire from Pin 14 to adjust your 
hearing to pure WWV. Then touch the wire to Pin 
14 again and you'll "sense" any differences. The 
whole process takes only а few seconds after you 
understand what to do, what to listen for, and 
what to watch for on the S-Meter. It isn't mysocal 
or difficult, it’s just harder to describe than to do. 


After you become comfortable with this 
procedure, you can use it whenever a WWV 10 
MHz signal is available to keep tabs on the 
condition of X-301. That's when you will bc 
pleasantly surprised! [t will rarely need 
readjustment! 


At the beginning of this section, I spoke of 
accuracy and stabilitv. Х-301 is a precision 
Temperature Compensated Crystal Oscillator 
(TCXO) which will rarely if ever drift out of 
tolerance. Once adjusted, a TCXO tends to stay 
adjusted. 1 wouid be surprised if it needed 


readjustment more than once every few months. to 
tell you the truth, and even then...?? 


Whenever you check X-301, count the number of 
beats or warbles per second and if less than 5, 
don't bother with the readjustment. 5 Hz off is no 
big deal. That's the neat thing about X-301, which 
takes us next to the “wonderful little use for it” 
that I mentioned earlier. 


USE YOUR PRO-2004/5/6 AS A 
PRECISION FREQUENCY STANDARD 


NOTE: Even if you don't have a SW receiver 
with which to verify and adjust X-301 per tbe 
above procedure, you can still perform the 
following modification with high confidence that 
the 10 MHz output will be within 20 Hz of exactly 
10 MHz. That's pretty close tolerance! 


Trim al! but about 1/8" of the leads of a 0.01 uF 
disk capacitor and carefully solder one of the leads 
to Pin 14 of the MC145158 chip. To the other leg 
of the cap, solder the center conductor of a section 
of mini coax cable such as RG-177/U (impedance 
doesn't matter), and I suppose you could use RG- 
58, though it's a bit bulky for this purpose. Solder 
the shield of this coax io the side wail of the metal 
compartment that houses X-301. Route the coax 
to the rear of the scanner's chassis and instal} a 
BNC jack RS #278-105. Solder the center 
conductor of the coax to the center pin of the BNC 
jack. and the shield of the coax to the metal 
chassis or to the BNC ground lug, if it has one. 


Now trim а notch or hole in the cover of X-301's 
meta! shield compartment so the cover can fit back 
on over the coax. 


YOUR OWN PRECISION TIME BASE 
Congratulations! 


Now you have a precision 10 MHz signal that can 
be used for anything from calibrating frequency 
counters to just periodically checking X-301 
against WWV without having to take apart the 
scanner! To calibrate a frequency counter, first do 
the WW “zero-beat” test to make sure that X-301 
is pretty close. within 5 Hz is great. Then connect 
the counter to the 10 MHz BNC jack and adjust 
the counter's internal calibration trimmer so that it 
reads 10.00000 MHz. Check both X-301 and 
your counter periodically. and you']l soon leam 
how drifty the counier can be. You'll also eam 
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Figure 3-Ji: Precision srequency standard 
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NOTES: 


A. Voltage regulator circuit not required if other source of +5v regulated OC is available 
8 Bottom view of the TX-1824 is shown; metal case tabs to be grounded. 


C. N-channel JFET; not critical; idea is to isolate the output of the TX-1824 from the external world 

D. All parts available from Radio Shack: wiring not critical, but all leads should be kept as short as possible and 
assembly should be installed in a meta! shielded box with a BNC output connector for best results. Add 
other enhancements as desired íncluding On/Off switch, LED, power jacks, etc. 


how rock-solid X-301 15; a space-age miracle of 
accuracv and stability. 


The 10 MHz output jack can provide your shop. 
shack. or station with a new dimension in 
precision and confidence in the accuracy of your 
equipment. 


[have evaluated X-30} in every PRO-2004/5/6 
ihat has crossed my bench since 1986. and in all 
that time the worst case of maccuracy ever noted 
was about 40 Н. and that unit had problems: 
The rest have been within 20 Hz and mosi within 
10 Hz. Therefore, even if vou have no method or 


desire to adjust X-301, you can sti} use the above 
modification as a standard frequency output for a 
variety of purposes! 


You see, it is safe to assume that X-301 1s within 
20 Hz of 10 MHz and possibly a lot closer. 


1 have been evaluating a spare X-301 that I 
instalied in a small metai box and keep powered 
up. night and day. I check it several ümes a day 
against WWV. and so far. it has по: drifted more 
than 4 Hz. Most of the time. it stays within ! or 2 
Hz of WWV, despite daily ambient temperature 
excursions of 20-307 in my shop. 
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So why did 1 iell you all this? Maybe I ought to 
have my head examined, because a perfectly fine 
scanner can get boogered up by indiscriminate 
monkeying around. On the other hand, the neat 
things about X-301 are just too valuable to keep to 
myself. Everyone (rusts frequency counters these 
days like babies trust their Mamas. but that's the 
wrong thing to do. 


А frequency counter 15 no more accurate than its 
time base, and most in the hobbyist's price range 
are no closer than 200-500 Hz, with 100 Hz near 
the best until price jumps sky-high. 


Hobby counters are typically specified to have a 
time base accuracy of Іррт when they leave the 
factory. Manufacturers rarely mention DRIFT in 
their literature. So you can see why a frequency 
counter is no good for adjusting X-301, but if I 
hadn't told you, then sooner or later you'd have 
discovered X-301 all by yourself and that little 
hole would have whispered, “Adjust me, adjust 
me!" 


And you would have grabbed vour trusty 
frequency counter and gone to town... and to 
oblivion. Now there's hope, because you can 
adjust X-301 correctly and at the same time, 
calibrate vour frequency counter for other 
precision needs! 


Now it’s project time, especially for those who 
don't own a PRO-2004/5/6 scanner. 


LOOK OUT! While the new PRO-2035 is almost 
a clone of the PRO-2004/5/6, its time base, or 
version of X301, is at 12.000000 MHz, not 
10.000000 MHz. 


You cannot use WWV to calibrate it using the 
technique this section describes for the PRO- 
2004/5/6. See the next section for alternatives. 


ASSEMBLE YOUR OWN PRECISION 
FREQUENCY STANDARD 


Use a stand-alone Х-301 mounted in a metal 
(temperature controlled?) box with a BNC Jack 
output! First call Tandy National Parts at (800) 
442-2425 and order a replacement X-301. 


Tell the order-taker that you have a PRO-2006 (cat 
820-1454) and that you need Part #ТХ 18246-3, 
identified as X-301 on the schematic diagram. A 
few days later, and you'll be well on the way to 
turning your shack into a mini-calibration lab! 
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The new X-301 has three pins on it: +5V, Gnd, 
and 10 MHz Out Make certain you understand 
which is which before moving forward. 


You li need a few other components and a metal 
box. preferably sealable. to complete the project. 
Refer to Figure 3-11 for the schematic, simple 
wiring plan, and the needed parts. The circuit is 
simple and self explanatory, but ГЇ] add that a 
J-FET transistor (MPF-102), or similar ts 
necessary to isolate the critical TX 1824 module 
from the things you may connect to it. 


The impedance between the drain and the gate of à 
J-FET is extremely high, such that if you were to 
short the output terminals of the cheap J-FET, 
absolutely nothing would happen to the more 
expensive oscillator module. Also, connecting 
things directly to the output of the TX-1824 could 
cause the frequency to drift a little. Oscillators are 
like that. The J-FET is cheap insurance. 


GENERAL PURPOSE RF PREAMP — 
THE WBA-6 


It's not often the home brewer can concoct an 
incredibly useful gizmo with almost embarrassing 
еаѕс. but I've got a hot dawg for everyone, from 
confirmed couch potatoes to dedicared field techs. 


The WBA-6 Low Noise, Wideband, RF 
Preamplifier will suit a variety of non-critical 
needs for amplification of RF signals from below 
] MHz to beyond 2000 MHz, with a noise figure 
of Зав or less. Flip ahead to Figure 3-72 for the 
gain curve of this useful gadget, which is +20dB 
at] MHz, -23aB at 250 MHz, +!2dB at | GHz, 
and +6dB at 2.5 GHz. 


Gain remains above +9dB out to 2 GHz. There 
may even be useful gain wel! below | MHz, but 
it's not specified by the manufacturer of the 
monolithic IC. So what's all the ruckus about this 
circuit? 

Radio hobbyists need to amplify radio signals 
between DC and Daylight, not only for receivers 
but also for test and measurement applications 
including frequency counters, RF and bug 
detectors, signal generators, oscilloscopes, RF 
voltmeters, and more. 


GAIN 


First, we need a basic understanding of 
amplifiers. Hobbyists tend to think in terms of 


| 4 
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pure, гам. unadulterated. rip-snorting, fire- 
breathing GAIN. Well, n would be nice if gar 
could be “unadulterated.” but unfortunately. we 
live in a real world. Basically. gan is à 
muluplication of signal strength and. preferably. 
to the exclusion of undesired signals. 


This is very difficult to achieve when the amplitier 
is to be what we call “wideband.” because within 
that "wide" band reside potenual undesired 
signals. 


Unfortunately. a wideband amplifier amplifies 
ALL signals within its passband. so those are not 
the kind of undesirable signals of which we speak 
in this context. Instead. we're talking about nasty 
signals like internally generated noise, 
intermodulation, and cross-modidanion products. 
These funky signals are controllable. but control 
comes at a price in the real world. 


Think of inter/cross-mod products as pseudo- 
signals. or signals that do not exist outside the 
device. They're generated by interacuon of 
discrete (single frequency) signals within the 
circuit. and appear ах sum and difference signais. 


Think of noise as it really 1s: random and chaotic 
energy. like static, that covers up or obliterates 
desirable signals. Amplifiers should be designed 
for low noise and high dynamic range to maximize 
the benefits of GAIN. but it's easier said than 
done. 


Modern technology has come a long way. 
however, and we can make use of it to home-brew 
a genera) purpose. low noise, wideband 
preamplifier for radio signals from way below 
MHz to well over ] GHz. 


Thanks to rhe cheap, simple MAR-6 monolithic 
amplifier chip from Mini-Circuits Labs, Inc., 
which is specified to have a performance range 
from DC to 2 GHz. 


DYNAMIC RANGE 


The dynamic range of the MAR-6 device is 
defined by the “/dB compression point," which is 
+24В т. This ts a ratio of the maximum gain of 
the device where incoming signals are compressed 
by IdB to the minimurn discernible signal level. 
+2dBm isnt especially great. but what do vou 
want for a few bucks? 


The MAR-6, as used in our WBA-6, will do 
nicely as an experimenter's genera) purpose КЕ 
preamp. You're gonna love it! 


| NOISE FIGURE 


| Noise figure is a very important specification of an 
amplifier. Imagine 100dB of gain with 100dB of 
noise. (Arrrgh ©!) Obviously, the iower the 
noise figure, the better. 


As a rule of thumb, anything below SdB сап be 
considered to be relatively low noise, but for 
receiver applications the lower the better. 


The noise figure for a typical commercial receiver. 
including scanners. 15 2dB or less with the real 
pro stuff coming in under 0.5dB. The MAR-6 
device in our Low Noise. Wideband Preamplifier 
has a Noise Figure of 3.0dB, which is “useful; 
not great." T wied the WBA-6 preamp with my 
PRO-2004. PRO-2006. and PRO-43 scanners. 
and with a Yaesu FRG-7700 shortwave receiver. 
It definitely made a difference on weak signals. 
and found some that couidn't be heard without it. 


Like most preamplifiers. it added pseudo-signals 
of its own. but this 15 acceptable for most hobby 
situations. Т also used mv WBA-6 as a preamp for 
à hand-held frequency counter and a handhe!d RF 
(bug) detector. where И really stood out! 


RESULTS 


If you use a frequency counter to determine 
frequencies used by security guards. siadium 
ushers and such, you”?! find that the WBA-6 can 
double or triple the effective range! 


If a walkie-talkie triggers your frequency counter 
from 20 feet away, the WB A-6 might increase the 
range to 40 feet or more (and double the range 
equals four times the power). The WB A-6 also 
lends itself as an oscilloscope and RF voltmeter 
preamplifier where circuit signals might be just a 
bit too weak to detect. 


BUILDING IT — FOLLOW BASIC 
RULES 


Okay, let's get down to brass tacks and build this 
jim-dandy, all-purpose RF preamplifier. You'll 
need only a few parts. as shown in Tuble 3-2. 


Remember that I said this project was going to be 
easy? It is. but you can't just slop it together and 
expect to enjoy the benefits of low noise and high 
euin over a wide bandwidth. 


Electronic design and construction techniques are 
"anything goes" between DC and a few hundred 
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kHz. Up to abou: 30 MHz or so, only the basic 
RF techniques are required. Then, between 30 
MHz and 300 MHz. things can get touchy if you 
don't choose the right components and pay close 
attention to how they are laid out. 


Above 300 MHz (UHF), there simply is no choice 
but to follow established guidelines for component 
and circuit designs for which there is almost no 
room for error. UHF frequencies just don't 
behave like HF and below. VHF is a middle zone 
where sometimes the old ways are okay, and 
sometimes not. The WB A-6, however, can 
perform up to 2 GHz and beyond, so special care 
must be exercised in its construction if you hope 
for lots of wideband gain with a low noise figure! 


COP.OUT 


Comes first. THE EASY WAY! Electronic 
Rainbow, Inc. offers the WBA-6 as a kit of all 
required parts, including precision printed circuit 
board. 


The kit comes with good instructions to assemble. 
install, and operate. See Table 3-2 to find sources 
for the WB A-6 Kit or for the discrete parts if you 
want io roll your own. You can fabricate your 
own WBA-6 from the diagrams and guidance 
offered here if you are handy with assembly and 
know something about the parts for VHF-UHF 
circuits; otherwise. the kit is vour best bet. 


CIRCUIT BOARD 


Fabrication of the little printed circuit board will be 
the most difficult part of this job, and only 
because VHF-UHF circuits don't tolerate much 
sloppiness or deviation from specs. Therefore, 
you should get the WBA-6 Kit from Electronic 
Rainbow, Inc., if you aren't comfortable doing 
the PC board yourself. 


You will need a double-sided PC board that 
measures about 20 X 30 mm. All the traces and 
foils are lines or rectangles, so the standard 
etching process might not be as good as a sharp 
utility blade (Xacto™ Knife) to slice through the 
copper foil; remove the unwanted copper strips by 
hand. 


That dental plaque scraper is a good tool for 
working the copper foil off the board after it has 
been scorcd/patterned with the knife. 


Figure 3-13 will present the simple schematic 
diagram and Figure 3-14 shows the foil pattern, 
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parts piacement, and important diraensions of the 
PC board, Figure 3-/5 is a photo of Rainbow's 
WB A-6 printed circuit board. 


After the PC board has been bought or made, and 
properly prepared, the rest of the job is a snap. 
Position and solder the components as shown in 
Figure 3-14. The MAR-6 amplifier chip has a dot 
next to one of the leads, to identify the INPUT 
pin. so check that when you solder it in place and 
the other three Jeads will be positioned just right. 


Use as little solder and heat as possible, but 
enough of each to flow smoothly and evenly. The 
choke, L-1, is a ferrite core slipped over a short 
length of solid hookup wire. 


You don't want to use a regular coil type of choke 
here, which doesn't work well at VHF and UHF 
frequencies. A 20 uH chip-style choke might 
work here, if specified for UHF frequencies, and 
if you can find one. Otherwise, use the specified 
ferrite bead slipped over a piece of solid hookup 
wire and keep the leads SHORT! Other than that, 
assembly of the PCB is straightforward so long as 
you use chip-type capacitors and resistors. 
Remember, we are anxious to achieve high gain 
over a wide band, with low noise. 


MECHANICALS 


The WBA-6 amplifier board should be installed 
inside a metal enclosure: the smaller, the better. 
BNC chassis-mount connectors should be 
installed on opposite ends of the enclosure at 
points closest to the RF Input and Output points 
on the WBA-6. You don't want any more lead 
length between the BNC connectors and the 
WBA-6 than is absolutely necessary. The RE Out 
end of the box should be fitted with a male BNC 
chassis jack to facilitate easy connection to 
scanners, frequency counters, etc. without the 
need for an adapter. 


You can use a female BNC jack at each end if 
more convenient, but then you'll need a male-male 
BNC adapter for some occasions. 


For my prototype unit, Ї built an enclosure out of 
double-sided printed circuit board material 
soldered together into a rectangular box, with one 
side temporarily left open for access. 


Each end cap of the box was drilled and fitted with 
a BNC chassis jack, female on the RF In end and 
male on the RF Out end. The box was made 
exactly long enough for the WBA-6 board to fit 
precisely. 
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Table 3-2: WBA-6 parts list and sources 
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Circuit Symbol Description 


Radio. Shackk - 


C-1.2 Capacitor. 0.OiuF, chip ® PCC103B 
C-3 Capacitor. |.SuF, chip Ө РСТ5) 55 
Cf Capacitor, 470pF. feedthru Optional 
L-i Ferrite bead Ө P9823 
R-i Resistor. 5119, metal film. chip Ө PSIiFBK 
U- i Monolithic amplifier; DC-2 GHz © MAR-6 
Mis: Primed Circuit Board, 2-sided Ө 276-1499 
Input BNC Chassis Jack. female (In) Ө PE4014 
Opuon BNC Chassis Jack. male (Out). or Ө РЕ4211 
Option BNC Male-Male Adapter (Out) O PE9000 
Kit 2048 Gain Preamp Ки, 2GHz 9 WBA-6 
WBA-6 Kit: MAR-6 Monolithic Amplifier 
о e 


Electronic Rainbow, Inc. 

6254 La Pas Trail 

Indranapolis, IN 46268 

(317) 291-7262; FAX: (317) 291-7269 


Electronic Parts and Supplies 
6 


DigiKey Corporation 

701 Brooks Avenue South 

Thief River Falls, MN 56701-0677 
(800) 344-4539; FAX: (218) 681-3380 


Hosfelt Electronics (Surplus Outlef) 
2700 Sunset Blvd 

Steubenville, OH 43952-1158 

(800) 524-6464; FAX: (614) 264-5414 


Mini-Circuit Labs, inc. 

PO Box 350166 

Brooklyn, NY 11235-0003 

(800) 654-7949; FAX: (417) 335-5945 


Coaxial Connectors and Accessories 
© 

Pasternak Enterprises 

PO Box 16759 

Irvine, CA 92713 

(714) 261-1920; FAX: (714) 261-7451 


e 


Radio Shack Stores (nearly all) 
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between the center lugs of the BNC connectors so 
as to minimize the lengths of the RF Input and 
output leads. 


The WBA-6 board was soldered along one of its 
long edges to the inside surface foil of the 
enclosure. The rig looks terrible because of the 
soldering it took to "weld" the seams of the "box" 
together, but the double shielding is total and the 
preamp works fine. After the unit was tested, a 
mating panel was soldered over the open side to 
RF-seal the enclosure. A small hole drilled 
through one end admits a wire for easy connection 
of DC power. 


A tab was soldered to the outside ground foil of 
the box for the ground (—) power lug. For critical 
needs, it is advisable that DC power to the preamp 
box be shunted to ground by a capacitor to dump 
outside AC interference that might have penetrated 
into the line. Put that cap just inside the enclosure, 
between the DC and ground. Any value from 470 
pF to 1000 pF will be satisfactory. 


In fact, a cap from the power supply feed to 
ground is a good idea wherever that feed might 
have picked up noise, and those locations will 
vary from layout to layout. The objective is to 
amplify only the signal. 


The RF-OUT end of the box feeds scanners, 
frequency counters, RF voltmeters, etc. The RF- 
IN side accepts a portable antenna or coaxial cable 
from a remote antenna. Be sure to label the RF-IN 
(antenna) side of the preamp so it can be 
distinguished from the output side which connects 
to the receiver, frequency counter, RF detector or 
other equipment. 


POWER 


All that's left to do is connect the (—) side of a 12V 
power source to the ground shell of the enclosure 
and the (4) side to the wire that goes into the box. 
Power requirements are about lómA @ 12V. 
Regulated DC is preferred for stable and quiet 
operation, but a filtered 12V will be fine for most 
cases. Batteries are very quiet: a 9V battery 1s 
ample if you don't need maximum gain. 


PERFORMANCE 


So now, what can we expect from the WBA-6? A 
lot, actually. 20dB is a multiplier of 100, 10dB is 
a multiplier of 10, and each 3dB increment is а 


multiplier of 2. So 23dB gain multiplies signals by 
200. 12dB multiplies by a factor of 16. 


For math fans, the dB (decibel) is defined as ten 
times the logarithm of the ratio of one level of 
power to another. It's typically Power Out to 
Power In, or: 


Рош 


in 


dB Gain= lOLog n» 


Voltage (E) and current (1) ratios are expressed as: 


am 


AB Gain= 10 Logh or Jos lout 


“in Inm 


GAIN CONTROL 


Most hobbyists won't care about the actual gain in 
a given application, but there are times when 
reduced gain js better than running full bore so 
you should have some sort of control. For 
instance, 23dB of gain at 250 MHz is likely to 
cause overload and interference in a scanner, so 
we need a method of attenuation. or gatn control. 
In fact, most receivers cannot benefit by more than 
about 10dB of gain. 


Gain Control on the WBA-6 is possible by 
varying the supply voltage. A range of 5-13\/ 
offers a good range of contro]. This is done by 
grounding one end lug of a potentiometer with a 
max resistance something near 5kQ, and feeding 
the +12V supply lead to the other end lug of the 
pot. Connect the WB A-6's power feed line to the 
center lug of the pot, and you're set. 


Purists will use a vanable regulated power supply 
instead of a potentiometer, and they're right. But 
the WB A-6 will prove satisfactory for some 
receivers, and is really useful for instrumentation. 
I observed good performance above 760 MHz on 
my PRO-2006, where it often made a difference 
between hearing and not hearing. 


If you like the WB А-6, then contact Electronic 
Rainbow, Inc. for their catalog of oiher fine kits, 
some of which can be combined with the WBA-6 
for "tandem" or cascaded operation. 


Electronic Rainbow, Inc. supplies other simple 
and easy kits for amplification of stronger signals 
like television, and for CATV distribution 
systems, including satellite. 
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Figure 3-12: WRA-5 performance 
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Figure 3-13: Wideband RF preamp schematic 
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Figure 3-14: Wideband RF preamp, parís layout 
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GENERAL PURPOSE RF 
PREAMPLIFIER — J-FET VERSION 


Here's another preamplifier for general purposes 
though it doesn't have the performance ef the 
WBA-6. This one is generic and not likely to be 
good for more than 40-50 MHz. but it's easy. See 
Figure 3-16. 


If your construcuon techniques are good, vou 
might be able to extract useful performance up to 
100 MHz. 


At the other end. this preamp will be useful close 
to the audio range, so it takes up where the WBA- 
6 leaves off at the lower end of the spectrum. 


It VHF performance is important to you, then use 
chip-type components for all resistors and use 
061 WF chip capacitors in place of the specified 
[uF caps. The 10 pF cap will do as shown 
(lantalum) but vou should use a decoupling 
capacitor on the DC power lead where it enters the 
enclosure that houses this preamp. 


Figure 3-16: General purpose preamp 


Ground 


Ground 


STATUS INDICATOR and LOGIC 
PROBE 


Bob scott, of Alexandria, Virginia. came up with 
a cucult that trins mv tigger; makes my cup 
runneth over und amazes me ne end for is 
SUMDUCHY and uscfelness around shop апа shack. 


1N4148 
x2 


As usual, you’ li want to mount this circuit inside a 
shielded, meta! enclosure as described in the 
previous section on the WBA-6 preamp. 


Variable gain can be achieved by substituting а 
series combination of а 1000 fixed resistor and а 
1К О trimmer potentiometer in place of the 1КО 
resistor in the emitter cf Q-2. Adjust the trimmer 
for desired gain/results. All teads should be kept 
short. and a printed circuit board is best for this 
project. Power the preamp with regulated +5 V. If 
you're interested in 30 MHz and below, perf- 
board construction will be fine. 


As with most homebrew preamps, this one is best 
for instrumentation and less ideal for receivers, 
but it will work for both if you can accept modest 
performance. 


It's especially suited for amplifying signals to be 
sent to test instrumentation such as oscilloscopes, 
RF voltmeters, frequency counters, etc. Little 
more need be said here: jusi build it... and good 
things will come. 


Ф= Optional ferrite bead slipped over 
. DRAIN lead extends frequency 
response, stops oscillations. 


Q-2 


C 2N918 or 
N 2N3904 


RF Out 


I^ s easy to build and. since it costs only 2 buck or 
two, сап be considered almost free. L realiy don't 
know what io cali this circuit because it has so 
талу tses. Dui T will focus on iwo, so depending 
on whai vou do with R, ors circuit will either be a 
Logic Probe or an LED suus tnóicator. One 
perfect appiicadon is Tor à Carrier- Ov Indicator to 
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indicate Squelch Breaks in your receiver! See 
MOD-31 in my Vol-2 for an early version of this 
circuit. 

Anything from a pilot lamp to a warning light can 
be called a status indicator. The neat thing about 
this one (and they're all simple) is the dual color 
feature rather than just a light that goes on or off. 


This one goes red or green. yellow or blue, 
whatever happens to be your preference to indicate 
some kind of an off/on: safe/danger: go/no-go; or 
ves/no status. 


In that sense, my Status Indicator 15 not ideal for 
pure ON-OFF situations where you want no 
current to be drawn when something is off. 


It would be great to indicate whether a door is 
open or closed: a liquid level is in the safe or 
dangerous zone; or perhaps the status of your 
receiver s squelch. Or the condition of almost 
anything properly wired to it. And, it's fun. In 
Chapter 9 you'll learn my definition of "fun." 
Honestly. this project is really fun! 


KEY PARTS 


Another neat thing about my Status Indicator is 
that it needs only one LED if vou can find the two- 
lead, by-color variety hike Radio Shack’s #276- 
012. That's right. a single LED of the right type 
can light at onc or the other of two colors, usually 
red and green. depending on which way current 
flows through it. 


If you can’t locate a bi-color LED, just use two of 
anv color vou like, wired jn parallel, but cathode 
to anode and anode to cathode. A 1 КО resistor in 
series with one side (doesn't matter which) 
completes the dual color status indicator section. 


You'!l need a CMOS Hex Inverter chip to drive 
the LED unit. 1С almost as simple as wiring the 
LEDs together. as you'll sec in Figure 3-17. Total 
parts count can be as few as five or as тапу as 
seven ij \ou're forced to use two LEDs. 


You can use most any sort or Hex fnverter. I 
suppose, but І prefer CMOS because such parts 
draw only about 5 mA for this circuit, You could 
almost breathe on Jt to make it work. There are at 
least WO reudiiy avallugic CMOS Hex Вие. 
the HCO! ipo favorie, aml rhe 4040), 


The aer tvpe ts fovad дно aa y where. с\ссо{ 
Radio Shack, under the Толо ing пас numbers 
Ср-1049: NTE-dC 10. ECGs 9. and MO 140d) 


E 
3. 


SOURCES 


Retail electronics supply houses usually stock the 
NTE or ECG lines, either of which will work 
fine. DigiKey and other national supply firms 
carry National Semiconductor's CD-4049 or 
Motorola's MC 14049. I like the high-speed 
CMOS 74HC series over the 4000 series because 
of generally faster operation at lower currents, bui 
for use as a Status Indicator. who cares? Just get 
whichever chip is handiest and lower in cost. 


It and when you get into things digital. it makes 
sense to focus your activities on one or two logic 
families in order to avoid having to stock a parts 
warehouse to meet basic needs. The 74HC and 
4000 series of CMOS logic will meet a variety of 
needs without sending you to the poorhousc. 


ASSEMBLY 


Wiring 15 not at all critical: just guard against 
foolish shorts, solder globs, and errors. 
Installation can be wherever and however best 
suits the needs of your application. The circuit can 
be installed in one location and the LED in another 
with a pair of wires between. Or, the circuit and 
LED can be remotely installed somewhere with 
but three wires feeding it from the main location. 
For that scenaric. you'll need a ground wire, a 
*5N power lead, and one wire to carry the signal. 


There are two important considerations for this 
circuit, one of which 15 the power supply that's 
specified to be a regulated +5V. routinely available 
in almost al things electronic nowadays. The 
4049-series, however is capable of DC power and 
signal inputs as high as € 18V while the 74HCO4 
is limited to 45.5 V тах. DC power and signal. 


Pick vour poison. Just be sure to use the specified 
2.2 ЦЕ capacitor as shown in Figure 3-17 to filter 
any spikes and transients before they get to the 
chip. The 100 pF capacitor on the input js 
opuonal. ^ut might be useful һе signal source 15 
to be any distance from tbe circuit. 


minaire the 100 oF capacitor if your application 
is for a Logic Probe. as discussed below. 


TRIGGERING TEE CIRCUITRY 
due second vat very important, considerayon foc 
this etreuv is that the signa) зари MOST be 

appro sinueh 29d o rhe power supply voltage 


` » СУ urb TOREM 
for uh" mpun and approximate egua to 
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Figure 3-17: Logic probe or status indicator 


DC Power (Vdd) 


+5v - *18v А T NS 
+5 5v max | i 
for 74HCO4 + | ‚ BiCotor LED 
2.2-4F = ; or two LEDs 
Venio add : wired as shown 
T Six, RSH 276-012 
Б Note 1 
SIGNAL INPUT eee ai al eld 0 
I we € RS4 271-1321 
Vdd = High —-—— "T ] 
Ov = Low eu 
(Can go higher than 100-0F Т. 100-K E HOUR EE RAS 
Vdd with the 4049 : RSW 271-1347 
). вава. — = Hex Inverter 
=== CD-4049 
NOTES = ECG-4049 
NTE-404 
1. You can use two different colored Нех Inverter Mote 2 ied 
LEDs wired as shown or a single 74HCO4 +5.18у Logic & DC 


bi-color LED. “L” signifies the LED 
that will light when the INPUT is 
"Low" while "H" shows the LED 
that will light when the INPUT is 
"High". A bi-color LED has two 
laads; reverse the connections 

to alter the color sequence. 


2. The 4049 Hex Inverter is more 
easily obtained than the 74HC04 
and allows signal levels higher 
than the DC supply! 


ground potential (0V) for "low" inputs. You 


cannot, for example, power the circujt with +)2V 


and then use signal levels of 5V and OV. 


The circuit will be confused over the 5V and 
possibly not know how to act. or else it will 
ignore it and think itis а low. 


Generally speaking, signal levels must be within 
about € 10% of the power supply and ground 
levels. In the case of a+12V supply, the high 
signal input will have to be around }1V while the 
low inpur will have to be less than 1 V. 


Summarizing, the signal logic has to be the same 
leve! as vour power supply and grounc. 

So if you're Jooking to display the status of 5V 
logic, use +5V power, eic. 


*5v Logic & OC 


Incidentally, this signal and DC power 
consideration is pretty much universal for a)l 
digital logic chips, especially in the CMOS 
families. 


Select your chips accordingly: 4000-series for 5 to 
15 volts and 74HC series for 5 volts only. Only a 
very few chips can mix logic levels and we'll 
point them out if we run across them. The 4049 
chip can accept logic levels HIGHER than the 
power supply voltage, unlike the 74НСО4, so it's 
probably the better choice for routine applications. 


LOGIC PROBE? 


This circuit can also be used as a Logic Probe... 
of the sort that costs $20-40 ready-made. А logic 
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probe is an indicator of logic levels. Commercial 
models have overvoltage protection and some 
fancy stuff that’s seldom needed by the hobbyist. 
А logic probe is great for quick and dirty checks to 
see if a test point is "high" or "low." 


There's nothing much to my own unit, and yours 
can be just as fancy as you want it to be. Start 
with the housing for the circuit. Radio Shack's 
261-2626 penlight flashlight makes a good probe 
housing. 


The mechanical рап ГІІ leave up to you. Just build 
this circuit using the 4049 Hex Inverter (not the 
ТАНСО4 !) into whatever vou want, with three 
conductors for the outside world. 


Obviously, the signal input should be a needle or 
other pointed tip with which to touch the signal 
trace. The other two conductors should be 
alligator-clip leads about 8-10" long, one black for 
ground and one red for (+) volts. 


As with the Status Indicator, it js mandatory that 
the Logic Probe be powered with the same supply 
voltage as the logic leve! you're about to measure. 
Most nowadays аге *5V. but some CB radios and 
other rigs of the past used +8V and +15У logic. 


Therefore, you must determine your expected 
logic Јемеіѕ in advance and be sure to connect the 
alligator clips to the proper points. 


И you're measuring +8V logic, it will have a 48V 
power supply in jt where you can attach the 
alligator clips. It's the same for - 15V and 45V. 


Those are the only logic leveis I know about — 
short of negative logic, which is not too common 
nowadays. The Logic Probe will not handle 
negative logic; strictly signals OV to 15V. 


3.3V logic is coming into vogue these days and T 
think the Logic Probe will handle it, especially 
with a 74HCO4 chip. but beware: the 74HCO04 
cannot iake more than +5V power or signal! 


The 4049 might gag on less than SV, but you 
could safely try it on 3.3V if there ts a need — and 
eventually. you will see one. 


HOW IT WORKS — CIRCUIT 
WALKTHROUGH 


Okay, for these who hke a lile theory with their 
breakfast, here's how the circuit works. Say we 
have it powered up with 25V ОС, bur no signal at 
the input. 


The GREEN or left LED in the schematic will be 
lit. Here's why: With no signal on Pin 3, the 
100k resistor pulls the input to a Low or O-volts. 
A Low passes through the buffer as a Low but 
gets inverted to a High (45V) at Pin 2. This High 
is split two ways. one to Pin 5 and the other to 
Pin 7. 


Now we have to split our thinking. First, the High 
at Pin 5 gets inverted to a Low at Pin 4 and is fed 
to an Input at Pin 9 which is inverted to a High at 
Pin 10. 


This Pin 10 High ts fed to the top of the two 
LEDs, so we'll see +5V on the anode of the "L^ 
LED and on the cathode of the “Н” LED. Now 
let's go back to the sp^it from Pin 2 and evaluate 
the other half of the action. 


The High at Pin 2 also feeds an Input at Pin 7 to 
be inverted to a Low Output at Pin 6. This Low is 
fed to the bottom of the LEDs through the 1k 
resistor. 


Thus there is a low (OV) on the cathode of the “L” 
LED and on the anode of the "H" LED. Simple 
enough. Now, do you see that +5У on the cathode 
of the "H" LED and the OV on the anode of the 
“H” LED? 


Sure enough, that is a reverse-bias condition and 

the "H" LED cannot conduct, therefore it will not 
be lit. But look at the “L” LED! +5У on the anode 
and OV on the cathode is a forward bias condition 
and therefore the LED will light! 


If you seiect a GREEN LED to indicate Low, then 
thats what you'll see: Green! 


Now suppose 45V is on the Signal Input at Pin 3? 
That high becomes a Low at Pin 2 which feeds 
Lows to Pins 5 and 7. The outputs of those 
sections are inverted to Highs at Pins 4 and 6. The 
High at Pin 6 ts fed through the 1k resistor to the 
cathode of the "L" and anode of the "H" LEDs. 


Meanwhile, the High at Pin 4 feeds to Pin 9 to be 
inverted to a Low at Pin 10 and thereby feeds the 
anode of the ^L" LED and the cathode of the “H” 
LED: 


The "L" LED cannot light because it is reverse- 
biased, but the “Н” LED certainly will light, 
thanks to its forward bias! 


The sixth Inverter section at Pins 14 and 15 is not 
used, so we lie its input to --5V so that jt will not 
oscillate and cause problems. 
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Unused inputs of ali CMOS circuits must be tied 
cither Low or High and not allowed to float! 
Unused outputs of CMOS circuits should be left 
floating, as shown. 


The tk resistor is a required current limiter for the 
LEDs. Most LEDs will burn out when current 
exceeds about 25-35 mA. 


The brightness of an LED does not appreciably 
change às its current is varied, unlike incandescent 
lamps, so it makes sense to limit the current to a 
very safe value, not only for the LED, but also for 
the chip that has to produce that current. 


The 2,2uF capacitor cleans up any noise on the 
DC power feed while the 100pF capacitor cleans 
noise from the signal line in cases where you have 
to use a long signal conductor. 


Enjoy the circuit as both a practical application and 
a great training-aid! 


SUMMARY and CONCLUSION 


I could go on and on with the helpful little circuits, 
techniques, tips. hints and kinks, but pretty soon 
there would be no room left for modifications. I 
suppose we'd better be moving on. 


If this sort of project (the backside of scanner 
hacking) interests you as much as it does me, then 
check out the World Scanner Report, which 
regularly covers even the black magic aspects of 
hacking. 


Now you need to muster up à proper measure of 
Patience, Attitude, and Intestinal Fortitude. Gather 
the right tools and materials and /er's go! 


We're moving from the sandbox... 


to the beach. 


B0 LB 


377. 50 M Hz. 


MEMORY TYPES 


Increasing a scanner's programmable and storable 
memory is one of the more popular modifications 
to come down Hacker Highway. Unfortunately, 
there is no hope of extending the memory of most 
scanners. 


Three general types of programmable memory are 
used by modern scanners. The most common is 
on-board RAM integrated with the CPU function 
in a single chip. This kind cannot be modified, 
and it includes about 90% of all scanners. Next, 
and the most easily modified for extended 
memory, are those dozen or so scanners that have 
a separate outboard static RAM chip (SRAM) to 
hold the channel and frequency programming. 
Less common, but definitely modifiable, are a few 
scanners using EEPROM (Electronically-Erasable 
Programmable Read-Only Memory). Let's take a 
closer look at each of the three sorts of memory. 


INTEGRATED WITH THE CPU 


Modem scanners are controlled by a multifunction 
microcomputer chip called a Central Processor 
Unit (CPU), which is really a sort of computer. 
Its primary function, of course, is to operate the 
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scanner according to a “plan” or program. This 
program is better called “firmware” and can be 
burned into read-only-memory (ROM) that’s 
integrated (combined) with the computing 
function. The communication path between the 
memory (that contains the program) and the CPU 
that executes it, is etched into the silicon iself, 
which is encapsulated in the package of the IC. In 
integrated units, such firmware is not alterable nor 
accessible from the "outside." 


Such highly integrated chips (CPU plus memory 
functions, at least) are expensive to bring to 
production, but cheap to make. It can cost more 
than $400,000 to design and lay out such a chip, 
but only a few dollars each to produce. 


Short of replacing the CPU with one containing 
your own program (fat chance!) there is no hope 
of altering any scanner function that is exclusively 
controlled by the instructions sent from integrated 
memory to the CPU. That's because the path 
between those two parts of tbe chip 15 interna], 
and cannot be accessed. Because it's less 
expensive to make and mount one chip rather than 
two, this type of CPU reduces cost. both to buy 
and in the assembly process. That's why they're 
in sach common use. 
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Most CPU's also contain the LCD Displav Driver 
function. which translate computer instucuons 
into characters we read on the display. Some 
exceptions occur in the PRO-2004/5/6 series that 
uses a separate LCD driver. 


This ts of no consequence to hacking in the past. 
but it affects the Ultimate Scanners of the future 
because the CE-232 Scanner/Compurer Interface 
captures and makes use of the data that (lows from 
the CPU to the LCD Display Driver in the PRO- 
2004/5/6, to perform some very powerful 
functions not possible with scanners using highly 
integrated parts. 


Again, that's because the path between the CPU 
(computer) and the I-CD driver consists of sub- 
micron traces of CMOS circuitry. We just cannot 
get to it because it's buried within the chip. 


Another common feature provided by many chips. 
including highly integrated ones, is programmable 
memory. Most CPUs hold a small amount of 
RAM (Random Access Memory). sufficient to 
store anywhere from ten to a hundred channels ог 
so, but again there is no wav to break the path 
between the functions (memory and processing) to 
add our own circuitry. This is true for most 
scanners, and on those there is no way to increasc 
memory. 


Fonunately, two other memory technologies, used 
by a few scanners, do offer possibilities for 
expansion. 


EEPROM 


EEPROM is the least common of the accessible 
memory technologies. 


The PRO-43. BC-2500XLT, BC-200XL T. and 
BC-100XLT use EEPROM. It is possible to 
expand the capacitv of EEPROM-based systems. 
though not by such huge proportions as the 
SRAM type. See the mod at the end of this section 
(on the PRO-43) for how to extend EEPROM 
memory. 


SRAM 


A handfet of scanners use a separaie SRAM 
(Static RAM; chip for storage of frequencies and 
custom channe! sevings. Eis this Iv pe of tac тогу 
that сап be easiiy and economically сма 
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Scanners that employ accessible SRAM memory 
include (at least) those in the following list. 


Radio Shack Uniden 
PRO-32 BC-590XLT 
PRO-34 BC-600XLT 
PRO-37 BC-760XLT 
PRO-39 BC-950XLT 
PRO-2004 

PRO-2005 Regency 
PRO-2006 R-1600 
PRO-2021 

PRO-2022 

PRO-2032 

PRO-2035 


There may well be other scanners that use SRAM 
— if you know of one, be sure to pass on the 
information to me and your fellow hobbyists. If 
you're curious about your scanner's potential for 
memory expansion, you can Just about forget it 
for those with fewer than [00 channels. 


The CPU's RAM easily handles 10 to 80 channels 
or so. If your scanner is not on the above list, but 
has 100 or more channels, then look over its 
Schematic diagram and parts list, or scrutinize its 
Logic/CPU Board for any of the following 
markings on schematics, parts lists, or the 
physical chips themselves: 


uPD446G-15 
TC-5517CF-20 
LC-3517BM-15 
CXK5864BP 
MB-8416-20LPF 


...or anything similar. You can usually disregard 
the last few digits and characters. which ofter. 
refer to manufacturer (for custom chips) or lot 
numbers. Remeniber, some manufacturers make 
scanners for more than one label. but when we get 
into the guts the part number tells the story. 


SRAM chips that appear in scanners are generally 
characterized by a rectangular shape, with 24 or 
more pins, and half the pins will appear on each of 
the longest sides (none at the ends). 


SRAM chips m a schematic agram can be 
tentatively identified bv 18 or more of their pins 
g: une NU ught (ce) the C рт: сн C 


Ans ололар Cs daa рх io Sog likely ts ч 


mp АДК Т On aime үр tue раге for 
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SRAMS are generally rectangular with 24 to 32 
pins. Pinout notation of SRAM chips will include 
mystic codes such as: 


А0, АІ...А9, etc. 
R/W 

CE 

101, 102...108, etc. 
OE 


Н your scanner uses SRAM, then it's a prime 
candidate for a magnificent expansion of its 
memory. The following procedures are the latest, 
best. and greatest for SRAM Extended Memories. 


EXTENDED MEMORY THE EASY WAY 
(16 Blocks) 
6,400 channels for the PRO-2004/5/6 


3,200 channels for the PRO-2021/2022/2032 and 
РКО-39/37/34/32 


1,600 channels for the BC-760/950XL T, 
BC-590/600XLT, and R-1600 


NOTE: this first section deals with the smaller 16- 
Block Extended Memory. Read it, but review the 
larger 64-Block Extended Memory before making 
up your mind which way to go. 


HOW MUCH MEMORY? 


Years ago, a scanner with ANY memory was a 
marvel, but now 50-400 channels is almost 
boring. Even 1,000 channels isn't all that great, 
with computer interfacing having come of age. 
And remember, the Ultimate Scanner Js always 
umbilically attached to its computer... 


My Vol | & 2 introduced potent paths to 6,400 
channels in the PRO-2004/5/6; 3,200 channels in 
the PRO-39/37/34/32, PRO-2021/2022/2032 and 
1,600 in the BC-760/950XLT. BC-590/600XLT, 
and R-1600. Bunches! 


Since those books were published. J have refined 
these techniques for extended memories of 
25,600, 12,800, and 6,400 channels. 
respectively. Obviously, one could stuff all the 
communications of a sizable municipality into 
such a unit. 


Surprisingly. some people are comfortable with 
the smalier versions. so I will present the latest 

techniques for both and you can make up your 

own mind which way to go. 
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LABOR, SKILL... 2 

Costs of my original MOD-16, 19, 37, and 51 
Extended Memories were modest, so the major 
investment was labor. These versions of Extended 
Memory called for the large DIP style of SRAM 
chip which had to be built on a perf board and 
wired to the pads where the old SRAM was 
pulled. Lots of work with 24 wires, but still, 
following my instructions, thousands of hobbyists 
extended their scanner limited memory! 


If you want the gory details of these older mods, 
refer to back issues of the World Scanner Report, 
and my books, for MODs 16, 19, 37, and 51. 


My latest procedures and techniques will skimp on 
verbiage and offer mostly the hard core info. It 
should suffice for most hobbyists, but snag the 


j above references if you want to go with this, but 


need highly detailed instructions. 


There's now a way to reduce the labor (and real- 
estate volume) of Extended Memory mods by 
50% or more. Now we can do away with the 
separate board and 24 gosh-awful wires that were 
required for the "huge" DIP static RAM chips. 


Thanks to better availability of surface mount 
memory chips, we just remove the scanner's stock 
memory chip and replace it, almost pin-for-pin, 
with a new and larger one! 


Make a couple of trace cuts on the scanner's 
printed circuit board; add a jumper or two; and 
route several wires out to external switches for 
25,600. 12,800, 6,400, 3,200 or 1,600 
programmable channels, and you'll be the first on 
your Block to have an Anti- Alzheimer's Scanner. 
And the new memory will be very efficiently 
organized! 


First, we'll discuss the fundamentals for the basic 
16-Block Memory Expansion. Details of the huge 
64-Block Expansion will follow later. 


OPPORTUNITY or TURNIP? 


Most expandable scanners use a 16k (2k X 8) 
surface-mount SRAM chip. See Table 4-1 to 
identify your scanner, hopefully as one that can 
benefit from Extended Memory. 


These are the only ones to my knowledge that use 
this SRAM, and which qualify for this memory 
hack. When you learn of others, please pass on 
the information. 


Table 4-1: Stock SRAM identification 


Stock SRAM Part # 
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Scanner Circuit Symbol 

PRO-2004. ..... ius Ju ооа TCSSI7CF-20 or y«PD446G-45 
РЕКО-2005.............. 1С «305: лаан LC3517BM-15 or any of above 
РВО-2006.............. IC -505 ово: LC3517BM-15 or any of above 
РКО-2032.............. Probably IC-2 ......... Probably any of ihe above 
РКО-2022.............. p ec УОС О Any of the above 
РКО-202).............. IC 7] oes diete t Any of the above 
РКЕО-39................. ЄК КУ Any of the above 
РКО ІА Any of the above 
РКО-34................. JC 3 peres dores ten Any of the above 

DERI АЛ ы ы: [£2 ee er e Any of the above 


MB8416-20LPF 


(This is an 8k X 8 SRAM) 


Once you've identified your scanner's memory 
chip, you'll! want to acquire the upgrade 
replacement, a 32k x 8 SRAM (256k) in surface 
mount technology (SMT) style. 


А generic part number is: 62256LFP12. 


MOSEL makes MS62256L-10FC, Motorola's is 
MCM60L256AF10, and NEC's version is 
uPD43256AGU- I2LL. 


The last two digits in these part numbers, a code 
for the speed of the chip. are not too important. 
Anything resembling -10, -12, or -15 is fine with 
the larger numbers indicating slower speeds and, 
therefore, tower prices. 


Hitachi, Samsung. NEC, Toshiba, and others 
produce these chips, so instead of using an exact 
part number, just tell your supplier that you want 


«а 256k static RAM, low power, flat- 
pack, surface-mount, organized as 32k x 
8 bits, with 28 pins" 


«and you might receive the correct part. 


Offer the above part numbers if you need a cross 
reference. The next section provides details on 
Jarger 728k х 6 Extended Memory chips. 


If you draw a blank trying to find these parts, 
drop me a line on my BBS and Pli try to help. 


Besides this SRAM chip, you’! need four 
switches as simple as SPST toggle types. or 
maybe a 4-segrment DIP switch, or even a BCD- 
encoded switch. 


If you are green on switches, then stick with 
toggle or DIP switches to access the extended 
memory Blocks. 


You can also use my KeyBoard Memory Block 
Controller (KMBC), MODs 28 or 28a, as featured 
in Vo}-2 of my SMH and in back issues of the 
World Scanner Report. This article will show the 
DIP switch method since the KMBC hasn’t 
changed. 


Before you go off half-cocked, please understand 
that extending the memory of your scanner is 
almost às simple as removing the stock SRAM 
chip and installing the new one. 


Almost. 


The stock chip has 24 pins, but the new one hàs 
28 pins. This adds only a slight complication, 
depending on your scanner. For insiaüce, the 
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PRO-2005 and PRO-2006 already have 28-pin 
pads right where the stock 24-pin chip will be 
removed — four pads are unused! This makes the 
job a breeze. For most other scanners, including 
the PRO-2004. you'll have to bend up four pins. 
(1, 2, 27 and 28) of ihe new chip and soider the 
remaining 24 pins to the exisung 24 pads. 


Please note that mosi scanners will require minor 
trace cuts, a short jumper or two, several wires 
from the area of the new chip to run ош то the four 
switches and four ]00k resistors. 


Figure 4-1: Memory augmentation 


OUT lug of IC-8 
PRO-2004/5/6 
A 


Speed diode ... | 
Not used -—..— 
Celiular diode 


Not used ---- -- 


NOTE 

This drawing is for the 
PRO-2005/6 but all 
other scanners will be 
similar. See text. 


| 
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It's NOT a one-step task. and it's NOT a snap, so 
(as I cautioned vou earlier) plan ahend. 


Review the instructions before starting, and make 
sure you have everything you need. By the way, 
don't tet the detail in Figure 4-/ worry you ~ the 
worst part will be getting your scanner torn down 
and the old chip removed. 


Lets get to work. 


NOTE: The PRO-2035 Extended Memory is 
covered separately later. 


Chrome Metal : 
Shield can be = 
trimmed in this. € 
|] pattern for ease : 
of present and 
future work. : 


Remove the from pape fium iho Dors б! 


radio. Кеп > м Dienas Pas from 


inside the ten cane! € 
covered in the Worl? Grea 
Vol-?. Desoider ола remove и 
shield that covers thea back sige мс 


Locate and remove EC-507, 


Otherwise. à good bei is te йу sum cach pin until 
the chip comes loose Then careful. desotder the 
cut piy ends from tie pads and clean an pags su 
they are bright and shiny. 


Desoldering wick and a very thin-Upped /ow- 
power soldering pencil are mandatory! Be very 
careful — too hot an iron, or too much time applied 
to the board, may LIFT the solder pads from the 
circuit board, and tha: requires major surgery to 
repair. 


ARE YOU STUBBORN ENOUGH TO 
WANT THE ORIGINAL PART? 


If you're handy with desoldering techniques, and 
have some need for the old part, you can try to 
remove that chip without destroying it. 


If you wish to remove the original SRAM intact, it 
can be done, but there is a risk of damaging traces 
and pin pads on the board. I have pulled hundreds 
of them, and still occasionally damage a pad or 
two. My method employs repeated applications of 
desoldering wick to first draw off all the excess 
solder from the pins and pads of the SRAM. 


It takes repeated applications of the desoldering 
wick to remove all possible solder, and even then 
most pins will remain tightly stuck to the pads. 
When the pins and pads are as solder-free as 
possible, I slip a sewing needle under a row of 
pins while gently lifting up at one end. 


I touch the soldering pencil's tip to the first pin- 
pad closest to the raised end of the needle, and if 
all is well, that pin will "pop" loose. 


Then I slip the needle in a little further, and in the 
same motion, [ move the soldering tip back to the 
next pin where it will "pop" free... on to the 3rd 
ріп... 4th... etc., until one side 15 free. 


The process is repeated for the other side. This 
procedure hardly ever goes smoothly, but it does 
work after a fashion. I am less fearful of it 
because I know how to repair damaged traces and 
pads. Do you? 
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|; CIRCUIT BOARD SUBGEEY 


| When the SRAM bas been removed. clean (o mid 
pads wath desoideing Wick so thai ties are 
smooth and shiny. Renai uny Aamoze before 


a a M —— — M Á— À—— « 


proceeding 


Rerer to Figure 4-7. Маке tour trace ours as 
fajiows. CUT on EACH sive of pug 24 so ihat it 
is completely isoiated. Then CUT to рое pad 2] 
completely. Finaby, CUT the trace to the 
previously unused pad just above old pad i. i This 
will become pad 2 for ihe new chip) 


Solder а jumper wire (45V feed) from new pad 28 
io an exposed solder potnt on the unbroken part of 
the trace that was cut to isolate old pad 24, A 
perfect spot is one of the component solder pads 
for the trace that connects C511, R525, and C513. 
Skip ahead to ALL SCANNERS. 


PRO-2004 & SIMILAR SCANNERS 


Locate and remove the stock SRAM chip. Specific 
instructions are minimal for these scanners 
because they are older and/or the mechanical 
information has been published in back issues of 
the WSR and/or in my books. Refer to the chip 
removal guidelines given above for the 
PRO-2005/6. 


After the old chip has been removed, cut the 
appropriate circuit traces so that old pads 21 and 
24 are completely isolated on the circuit board. 
Continue just below in ALL SCANNERS. 


ALL SCANNERS Т 


Lay the new chip on the old pads so its pins line 
up with the pads beneath them. If your scanner 
does not have previously unused pads for new 
pins 1, 2, 27, and 28 (and most won't), then 
carefully bend those pins on the chip up so they 
protrude straight out from the sides of the chip. 


The PRO-2005/6 has 28 pads. 


All the rest, including the PRO-2004, have 24 
pads. Hence, pins 1, 2, 27, and 28 of the new 
chip won't have any mating pads and therefore 
rust be bent up so that wires can later be soldered 
to these pins. 


Pin #14 of the new chip goes to pad #12 of the old 
chip. Likewise, pad 13 for the old chip gets pin [5 
of the new chip. Position the new chip so that 
perfect pin alignment is achieved. 
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These four pins must not touch anything! Solder 
one end-corner pin of the new chip (14 or 15) io 
its pad. 


Ensure that alignment remains correct. adjust it 
necessary, and then solder a diagonally opposite 
pin to its pad – that will hold all remaining pins in 
position. Inspect the chip carefully. looking at 
every pin. 


It all js well and alignment is perfect. solder the 
remaining pins to their respective pads. 


WIRING and SWITCHES 


Solder suitable length wires to each of the new 
pads/pins 1, 2, 14, 23, and 26, and route these 5 
wires out to where the Block Selector switches 
will be located. Wire the switches and resistors as 
shown in Zigure 4-1. Observe that one side of all 
switches are wired together, and then fed from a 
source of regulated *5V. 


Avoid using the CPU +5V supply if you can. 
Instead, run the wire to a +5V source for the 
receiver. If not feasible, then go ahead and use the 
CPU's +5V source, but ensure that it remains 
very close to +5V despite the additional load. If it 
doesn't, find or make another source. 


If vou use DIP switches, install somewhere on the 
scanner a standard IC-DJP socket to match the pin 
requirements of the DEP switch. to allow your DIP 
switch te be quickly plueeed in and ош. Several 
spare DIP switches can be kept handy. preset to 
vour preferred Memory Blocks! DIP sw ttehes 
allow a tidy and compact ynstajlation. 


These switches are tiny, and can be installed in 
cramped spaces. Therefore, it may make sense to 
АН a larger switch Black than required by your 
immediate needs. 

For instance, our | 6-Block Extended Memory 
requires 4 Switches, but why not install an 8- 
switch DIP Block and use the spare 4 switches for 
other mods and hacks later? 


Think about it... 


NOTE FOR SCANNERS OTHER THAN 
THE PRO-2005 & 2006 


Solder a jumper or hookup wire from the elevated 
new pin 28 to a solder joint on the trace that was 
cut away from old pin 24. Solder a jumper wire 
from the elevated zen pin 27 to a solder joint on 
ihe trace that was cut awav from old pin 21. 


OPERATION 


This variation of the Extended Memory Mod will 
yield 16 Blocks of ordinary channels, each Block 
programmable with the same number of channels 
the scanner had before the project began. 


The PRO-2004/5/6 will have 16 Blocks of 400 
channels each, for 6,400 channels; the 
BC760/950/590/600XL T will have 1,600 
channels and the others will have 3,200 channels. 


BANKS FOR THE MEMORIES 


You may never use all this rnemory. but quantity 
is NOT the main idea here! Instead, it's to gain the 
sixteen Blocks of 400, 200. or 100 channels each, 
which essentially gives you 16 identical scanners 
all lined up in a row, Individually programmable, 
and with one at a time available for use. 


The Biock concept is an elaboration of the Bank 


| concept. but which allows up to 16 different 


compiere programs for your scanner. You con 
dedicate опе Block to railroads. another to 
aviation, others still for inilitary. medical. 
emc:egency. and several for scratch and messing 
around. but save a couple for the real serious 
stuff. In other words, an Extended Memory 
allows greater flexibility m seteng up a scanner to 
do the things vou want it to do! 

You're not obligated to use al! 1,600-10-6,400 


channels. but vou will find immediate uses for the 
16 Blocks! 


And Figure 4-2 shows how those Blocks are 
accessed: 
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Table 4-2: Programming 16-Block identifiers 


Swr4 SW #3 SW? Swe 
OFF OFF OFF OFF 
OFF OFF OFF ON 
OFF OFF ON OFF 
OFF OFF ON ON 
OFF | ON OFF OFF 
OFF. ON OFF ON 
OFF ON ON OFF 
OFF ON ON ON 
ON A OF è OF OFF 
ӨМ ОХО ОРЕ OFF ON’ 
ON OFF ON OFF 
ON OFF ON ON 
ON@= ON OFF OFF 
ONS Saw ON OFF ON 
ON ON ON OFF 
ON ON ON ON 


BLOCK ID MEM 


BINARY 
IN CH-1 BLOCK# EQUIV 
1000.000 00 0000 
100 1.000 01 000! 
100 2.000 02 0010 
100.3.000 03 001) 
1004.000 04 0100 
1005.000" : ` 05 0101 
100.6.000 06 010 
1007.000 07 Oll 
1008000. 08 1000 
1009.000 = -09 1001 
1010.000 10 100 
1011.000 E 1011 
102.000 — 12 = 1100 
1013.000 — 13 nor 
101 4.000 {44 — 1110 
101 5.000 I5 — Inl 


COUNTING SCHEME 


The 4 switches yield 16 combinations of settings, 
from all OFF to all ON. Each combination 
activates one Block of original programmable 
channels. When you change Blocks, one 15 
switched out and another switched in. 


The actual scheme is binary and might not be 
familiar to all scannists, but it is the easiest 
counting system of them all; simpler than the 
decimal system! It's especially easy if you've 
never learned to count by ten, or never looked 
down at your fingers. 


If you are uncomfortable with the binary counting 
system, it will help to program a coded frequency 
into Channel 1 of each Block for a quick reference 
to which Block you're in at any time. If we refer 
to all switches OFF as the "home Block," then a 
frequency in Ch-! such as 100 0.000 will clue you 
to Block 00 while a frequency of 1015.000 
programmed into Ch-1 of the Block with all 
switches ON will clue you to Block 15. 


Refer to Table 4-2 for the pattern and program 
clues. If your scanner won't accept 1000MH2, 
then use something else, like 90 0.000 to 

91 5.000, or 500.000 to 515.000. 


CAVEAT: You should develop a habit of 
turning off all the Block switches when the. 
scanner is.not in use. 


Those 100К resistors each draw a small current 
from the memory rétention circuit when a 
desktop scanner is disconnected from power, 
or when batteries are removed: from a 
portable. 


WHAT'$ STORED 


Some scanners, such as the PRO-2004/5/6, will 
not only store all those frequencies in the SRAM, 
but also custom settings of MODE, DELAY, and 
LOCKOUT. Other scanners may store only 
frequencies in the SRAM chip and custom channel 
data in the CPU's RAM. 
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In that case, a LOCKOUT and/or DELAY set to 
one channel in a certain Block wil! LockOut or 
Delay that same channel in all Blocks. Sorry, 
that's a function of the scanner's CPU and 
firmware and can't be helped. 


With exception of Priority Channel and selected 
Scan Banks, the PRO-2004/5/6 are exempt from 
this limitation because the SRAM stores all 
pertinent channel data. 


GARBAGE - NOISE 


After this mod is finished and you fire up the 
scanner for the first time, there is likely to be a 
bunch of strange frequencies seemingly 
programmed into the channels. 


Don't believe what you see because this is "noise" 
that was present in the chip when it was first fired 
up. Be sure to do a Restart or Master Clear before 
doing any programming. For the PRO-2004/5/6, 
this involves pressing the RESTART button on 
the rear chassis. 


Press the little button inside the battery 
compartment for the PRO-34 and PRO-37. On the 
PRO-2021 and 2022, the Uniden radios, and 
everything else, do a Master Clear or Restart 
before doing any programming. 


WHAT IF 16 MEMORY BLOCKS 
AREN'T ENOUGH? 


Some people would call vou crazier than an 
outhouse mouse if you couldn't "make do" with 
1,600 to 6,400 channels. Well, if you are using a 
computer, those channels can fill quickly — 
particularly if you've bought one of the really 
large FCC databases. 


I ran out of breathing room within weeks after I 
did the basic memory mod on my old PRO-2004 
and PRO-34. 


It wasn't a shortage of channels as much as the 16 
Blocks ran short when I allocated one for general 
operations, one for emergencies and disasters; 
several for federal government; four or five for 
business and industrial; a couple for military; one 
each for aviation, railroads, space, medica] and 
state, a couple for local governments, and à couple 
for scratch. I just got started and hit a dead end! 
Kind of like running out of channels. ® 


But there's a fix for that... 


I went back to the parts books and located a 
memory SRAM that's four times larger than the 
16 Block 32k x 8 SRAM. Ahah! 64 Blocks was 
my ticket! Never mind the 25,600 channels it 
yielded; hell, I'd never use THAT many. 


But then came the HB-232 and CE-232 Computer 
Interfaces to do all the finger punching for me. 
Now, there i5 NO REASON not to be a channel 
hog! I don't have to work to stuff a few thousand 
channels, so why not stuff'em? My computer can 
work harder than I can! 


Whatever your situation, 6,400 channels and 16 
Blocks might not be enough for your needs, so 
the next step up involves Jabor similar to that 
described for 1600-6400 channels above, and a 
new part. Several compatible 128k x 8 (IMb) 
SRAMS are available, and the procedure for 
installing it in your scanner doesn't change. 


The result will be an astounding 64-Blocks times 
the standard base number of channels in your 
scanner, or 25,600 for the PRO-2004/5/6; 6.400 
channels for the BC-760/950XLT and 
BC590/600XLT; and 12,800 channels for the 
other scanners on the list! Again. it's the 64 
Blocks that’s the primary advantage here. 


I'm sure there are a number of manufacturers of 
the 128k х 8 SRAM, but the one I use is the 
Samsung KM681000LG-8. 


Again, the last digit or two are speed indicators 
and are not important for scanner memory 
applications. Any speed wiil do. I am told that one 
reliable supplier of these SRAM chips is Vantage 
Electronics at (201) 777-4100. Another is Time 
Electronics, (800) 772-8638. You can also try 
Active Electronics at (800) 343-0874. Other 
possible sources include DigiKey. JameCo, and 
Mouser Electronics. 


If you strike out, contact me on my BBS. 


ADAPTING THE CHIPS: 


The {28k x 8 SRAM has 32 pins, and installs 
pretty much like the 28 pin 32k X 8 SRAM. 


In the case of the PRO-2005/6, there will be no 
place to solder pins 1, 2, 31, and 32 because of 
overhang: and for а] other scanners, eight pins 1. 
2, 3, 4, 29, 30, 31, and 32 will have to overhang 
the normal installation area. Therefore most of 
these overhang pins must be elevated for 
individual connection to wires. 
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Can't be helped, but fortunately, these pins will 
go out to the switch block and require hookup 
wires anyway. 


Pin #1 is NOT USED in the 128k chip, period. 


You can cut it off, if n bothers you. Otherwise, 
there is almost no difference between the 128k x 8 
and 32k x 8 SRAMs. The 128k X 8 SRAM is 
Jonger and slightly wider than the 32k x 8 and 
stock SRAMs. As it comes out of the package, the 
"footprint" of the chip is too wide to solder down 
on the stock SRAM pads, but not to worry! There 
will be a perfect mate with the PCB pads if the 
"feet" of the SRAM pins are bent straight down 
like the pins of a “normal” DIP chip. These pin 
feet can be properly bent out flat in à small vise, 
one side at a time, or with a pair of "duckbill" 
pliers with smooth and straight jaws. Lacking 
these tools, bend a few feet at a time down straight 
using a regular pair of phers. 

DO NOT bend just one pin foot at a time. DO 
NOT bend down pin feet 1. 2, 31, and 32 and if 


your scanner is not a РКО-2005/6. then don't 
bend pin feet 1-4 and 29-32, since these pins have 


to be out straight or slightly elevated above the 
body of the chip anyway. 


Figure 4-2 shows the functional pinouts for four 
SRAM chips, including stock SRAMs that come 
with the scanners. A casual study of these chips 
reveals that almost all pin functions are in the same 
relative positions. If you superimposed the four 
chips, aligned at the bottoms, you wil! note near- 
perfect correlations. 


Relative to the stock 2k X 8 SRAM, the 32k х 8 
version has 4 more address lines, Al 1-A 14. The 
128k x 8 SRAM has six more address lines than 
the stock SRAM, A11-A16; plus one additional 
Chip Enable function (CE2 at pin 30) and one 
unused pin, #1. 


The same PCB work (pad isolation and jumpers) 
must be done for this 64-Block version as the | 6- 
Block one, regardless of scanner. Figure 4-3 will 
guide you. 


If there remains any doubt on what to do after 
reading this, refer to the World Scanner Report 
Vol | #8 and Vol 3 #4, 


Figure 4-2: Static RAM pin and pad comparison 


—— ———- Stock Chips 
PRO-2004/5/6 
PRO-2021/2022/2032 
PRO-39/37/34/32 
BC-760/950/590/600XLT 
R-1600 c 


PRO-2035 


1 
2 
| 3 
4 
| 5 
| 6 
| 7 
8 


Ground 


2k x8 
CXK5816M-15L (C353 78Mi-15 
TC5517CFL-20 M88416-20LPF 


LEGEND 


i/O4 13 


14 Ground 


8k x 8 
CXK5864CM-12LL 


| Upgrade Chips -——— —4 
64-Blocks 


16-Blocks PRO-2035 
16-Blocks 
(4-Blocks PRO-2035) 


(1/04 1777. 


СТ 16 Ground 


128k x 8 
KM681000LG-8 


32k х 8 
MS62256L-10FC 


mm = Pads for these pins on stock chips will have to be isolaled іо eccouni for differences in replacement chips. 
27 = Pods ond pins for these chips ore compatible and wilf not require any modification or olleration. 
EX: = These pins on replacement chips may require special treatment, depending on specific scanner See lexi. 
COMMENTS. The PRO-2035's 8kx8 SRAM can be used as a 4-Block Upgrade for other scanners, but why bother? 
The dotted lines moke it easier for Ihe eye to follow pin-for-pin comparisons of the four chips. 
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Figure 4-3: High capacity SRAM wiring diagram 


100-k ea 


То +5v Reg С | 


OUT lug of IC-8 
PRO-2004/5/6 


Speed diode -_. 
Not used —- 
Cellular diode 
Not used —-——_. } E 
NOTE 
This drawing is for the 
PRO-2005/6 but al) 


other scanners will be 
similar. See text. 


Shield can be - 
2 trimmed in this + 
pattern for ease | 
of present and © 


It is easily seen. then, why memory expansion 
techniques using surface mount SRAM chips 
require a LOT less labor than the larger DIP chips 
specified in earlier versions of this mod. 


The labor savings with surface mount SRAMs for 
extending the memory of these scanners should 
motivate many couch potatoes. 


There will be less chance of error, and reliability 
will be enhanced by this new technique. Use it! 


Here's how to deploy the 128k x: 8 SRAM ir your 
Scanner. 


INSTALLATION DIFFERENCES 


If your objective is 64 Blocks, the preceeding 16 
Block discussion is a good general guideline. The 
methods and techniques are much the same with 
exception of the need for six Block Selector 
Switches instead of four, six 100k pull-down 
resistors instead of four, and the wiring plan 
shown in Figure 4-3, above. 


As we continue, you'll learn the details of the 
point-to-point wiring plan; please follow them 
exactly and check off your progress. 
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In reading the layout data, the letter codes A-H 
refer to Figure 4-3. Also, note the following: 


“Elevated pin; по pad – requires direct wire. 


"Low" switch lugs go to ground. 


SRAM layout - refer to Figure 4-3 
PIN # Destination 


2 H Switch 6 

3 D Switch 4 

4 B Switch 2 

16 E Common with all “Јом” 
Switcb lugs (ground) 

25 A Switch 1 

28 C Switch 3 

30 - Common to pin 32 below 

34- G Switch 5 

32: CPU +5V; also to common 


as pin 30 above. 
To regular +5V regulated 


PRO-2005/6: ONLY 


Remove the old SRAM. Clean the old SRAM 
pads on the PCB with desoldering wick. Isolate 
old pads 21 and 24. 


Isolate what will become a new pad 2 (just above 
old pad 1). 


Bend (out and slightly up) pins 1, 2, 31, and 32 
of the new chip so they won’t touch the PCB 
when the chip is installed. 


Install the new chip, ensuring good solder joints 
for each pin to the old pads. Pins 16 and 17 of the 
new chip go to old pads 12 and 13, respectively. 


Solder a jumper between pins 32 and 30 of the 
new chip. 


Solder a jumper from the existing, uncut trace 
(C513 and R-525) that used to go to old pad 24 to 
pin 32 of the new chip. 

Solder suitable length wires to each of pins 2, 3, 


4, 16, 25, 28, 31, and 32 and route these wires 
out to where your Block Switches will be located. 


Wire the Block Switches in accordance with 
Figure 4-3. 


PRO-2004 AND OTHER APPLICABLE 
SCANNERS 


Remove the old SRAM. 


Clean the old SRAM pads on the PCB with 
desoldering wick. 


Isolate cld pads 21 and 24. Bend (out and slightly 
up) pins 1, 2, 3, 4, 29, 30, 31 and 32 of the new 
chip so they can't touch the PCB when the chip is 
installed. 


Install the new chip, ensuring good solder joints 
for each pin to the old pads. 


Pins 16 and 17 of the new chip go to old pads 12 
and 13, respectively. 


Solder a jumper between pins 32 and 30 of the 
new chip. 


Solder a jumper from the PCB trace that was cut 

from old pad 21 to the elevated pin 29 of the new 
chip. 

Solder a jumper from the trace that used to go to 

old pad 24 to pin 32 of the new chip. 


Solder suitable length wires to each of pins 2, 3, 
4, 16, 25, 28, 31 and 32 and route these wires out 
to where your Block Switches will be located. 


Wire the Block Switches in accordance with 
Figure 4-3 and the wiring instructions in this 
section. 


PROGRAMMING 


Table 4-3 illustrates the same memory-aid 
technique that I recommend for 16-Block mods. 
Channel | simply carries a frequency of which the 
3rd and 4th digits combine to identify that 
particular block. And who knows? You might get 
lucky and use an identifier that’s actually a usefu] 
frequency! 


The identifier is a little complicated, but it beats 
learning to think in binary. You'll get used to it. 


And if you' ve simply gotta know what all those 
one's and zero's really mean... here's the shortest 
course in binary numbers you've ever seen. 


Binary code sets a discrete value for each position. 
with values that ascend as one moves from right to 
left. The rightmost position is worth 1, the next 
position 1s worth 2, the next 4, etc. Each position 
15 worth twice as much as the one to the nght. If 
there's a zero in a position, its value is zero. If 
there's а "'[" there, then its value is as stated. 
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Any integer can be expressed through some 
combinations of 1s and Os, by simply adding the 
values of occupied (by a 1) positions. For 
instance, if the rightmost position is the only one 
with a “1” in it, the total value of the binary 
number is |. If the next one is also filled (with a 
“ р"), then the total value 15 1+2. And so on... 


3216|8/4|2]|1 
1/0 1[1/010 


So in this case, reading right to left, it's: 
0+0+4+8 +0 + 32 = Channel 44! 
Similarly. 010011 is 1+2+0+0+16+0 = 19. 


I won't give you a test, but if you look at either of 
the block programming tables you'll now be able 
to understand the rightmost column. 


Aintcha proud?! ? 


Position value 


Binary code 


A true TurboWhopper! 
This PRO-2006 has every kind of tuning and center channel indicator. 
It looks like a lot, but every LED has a purpose. 
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THE BEST OF THE BEST! 


And this wraps up one of the best do-it-yourself 
mods of al! time. It adds functionality, fun, 
practicality, and value. It’s cheap, and doing it is 
an education that adds to your manual skill and 
technical understanding. What more do you want? 


Technical support for all my modifications are 
always available through my computer bulletin 
board. 


Limited mail support is also available if you don't 
have a computer and modem — but why don't 
you? Remember, to be ultimate, the scanner must 
have a host computer! 


Follow my instructions, be patient, have the right 
tools and materials on hand — especially the 
service manual for your scanner, triple-check your 
work, and you're not like]y to encounter trouble. 
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Table 4-3: Programming 64-block identifiers 


BLOCK MEM BINARY 
SWH6 5%#5 SWil4 SWRI Swim SWfl ID, СНІ BLOCK# EQUIV 


000000 


OFF OFF OFF OFF ON 1001 000 ol 000001 
OFF OFF OFF ON OFF 1002 000 02 000010 
OFF OFF OFF ON ON 1003.000 03 000011 
ОРЕ OFF. ON ^c CORPO OFF, 1004000 104 555589990100: 555: 
OFF OFR ON =. OFF ом 1005000 05 00001. . 
OFF OF ON ON OFF 100600. 06 HIN 
OFF OFF: ON ON ON 1007.000 = OT 90011t- 
OFF ОРЕ б oF  — om (008.000 [: 001000 
OFF OFF OFF OFF ON 1009 000 09 001001 

OFF OFF ОРЕ ON OFF 1010.000 10 001010 
OFF OFF OFF ON ON 1011.000 T 001011 
OFF OFF ОМ OFF: OFF: “NONE OOD a2 55100Н4100 cs 
‘OFF. OFF ON OFF ON 1013000 13° ono 
OFF OFF ом ON ОВЕ 1014.000 14 . 001110 
OFF ОРЕ ON ON ON ' 1015000 — .15. 001111 
OFF ON OFF OFF OFF 1016.000 16 010000 
ОЕЕ ON OFF OFF ON 1017.000 7 010001 
OFF ON OFF ON OFF 1 018.000 18 010010 

OFF ON OFF ON ON 1019.000 19 010011 
ОРЕ on — Pape OFF. © 1039000 лө фоно 
OFF... ON c ОМ OFF ON 102,000 ор Ооо = 
OFF ON ON ON OFF .. 1022000 22 010110 . 
OFF ON ON ON ON 1023000 23 010111. 
OFF ОМ “OFF” OFF ОРЕ (624.600 7A “011000 
OFF ON OFF OFF ON 1025.000 25 011001 

OFF ON OFF ON OFF 1026.000 26 011010 
OFF ON OFF ON ON 1027.000 27 011011 
OFF ON ON OFF ‘OFF .. 1028000 28 011100 
OFF. ON ОМ ОРР ON . 1029000 9 оно 
OFF ON . ON ON OFF 1030.000 30 011110. 
OFF СОМ _ON _ ON ON 1031.000 3i он 
ох ОРЕ ОРЕ OFF OFF 1032.000 32 100000 

ON OFF OFF OFF ON 1033.000 33 100001 
ON OFF OFF ON OFF 1034.000 nd 100010 

ON OFF OFF ON ON 1035.000 35 100011 

ON OFF ON: “OFF OFF 1036:000 367 100100 . 
ON ‚ОРЕ -ON F ON 1037.00 37 100101. 
ON OFF ON ON | OFF  . 1038000 38 100110 
ON OFF ON ON ON 1039.000 -39 1001117 

ON OFF OFF OFF OFF 1040000 — 40 “ 101000 
ON OFF OFF OFF ON 1041 000 41 101001 

ON OFF OFF ON OFF 1042.000 42 101010 
ON OFF OFF ON ON 1043.000 43 10101) 
ON ОУ ОРЕ: ON . ОЕ ОРЕ 1044:000 44... 01100. 
ON ОВЕ ON от. ON 1045000 © 45. 10101 
ON OFF ON ON = OFF 1046000: —— 46 JOO 
ON OFF ON. ON ON 1047000 41 101111 

ON ON - ОРЕ OFF OFF 1038 000 48 100000 

ON ON OFF OFF ON 1049,000 49 100001 
ON ON OFF ON OFF 1050.000 50 100010 
ON ON OFF ON ON 1051.000 5} 100011 
ON KON ON OF . ОВЕ  . 10823000 5 100100 
ON ON ON OFF ON: | 10853000 53. 00101. 
ON - ON ОМ . QN оғ 1054.000. 54 5300110. 
ON ом ON | ON ON 1055.000 5 100111 
ON ON OFF OFF OFF 1056000 — 56 101000 
ON ON OFF OFF ON 57 57 101001 
ON ON OFF ON OFF 58 101010 
ON ON OFF ON ON 59 101011 
ON ON QN OFF ОРЕ 60 шоо 
ON. ON ON OFF ON 6l JUD o 
ON ON ON ON: ОРЕ 2  . он 
ON ON, ON CON ON ORE s 
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HELP FOR MEMORY MODS 


There are several ways to control my Extended 
Memory Mods, including DIP switches, 
Keyboard Memory Block Controllers, and the 
CE-232 Scannet/Computer Interface, but there are 
none slicker than Mark Persson's LINKALL 
EXTENDED MEMORY CONTROLLER. 


Unfortunately, the LINKALL is not something 
you can conjure up all by yourself. I will give it a 
few words, and let you decide if this is for you. 
LINKALL is a well established, commercial 
product of good repute, and it's been upgraded 
and enhanced just in time for me to bring you the 
good news. 


LINKALL EVOLUTION 


The original LINKALL Extended Memory 
Controller that revolutionized the control of PRO 
200x scanners with extended memory has now 
been upgraded with more features and can now 
control either the 6,400 or the 25,600 channel 
memory upgrade. LINKALL lets you scan all or 
selected portions of Extended Memory as if it 
came stock with the scanner! 


The new LINKALL printed circuit board has 
shrunk to a tiny 2" X 4" thanks to a small 
microcontroller unit (MCU) that does virtually all 
the work. Stuffing the new LINKALL into a 
heavily modified scanner is much easier than the 
older generations. 


Low power consumption and low noise are 
assured by the use of an MCU with а SLEEP 
modc. This allows the processor to only perform 
tasks when necessary and literally shut itself off 
while retaining its interna! memory. 


Among the many features of the new LINKALL 
are a self test mode, Display LED test, No- 
Blocks-Programmed Waming Mode, and the two- 
speed Keyboard Memory Block Controller feature 
that advances the Block address automatically at 
two Blocks per second then shifts gears to the 
higher speed 4 Blocks per second. 


This is a great feature for the larger 64 Block 
Memories. The new LINKALL still has that great 
auto increment feature whereby only selected 
Blocks are scanned and al] others are skipped. 


For example, if only Blocks 1, 17, 39, 43, and 
55 are selected, then when the scanner hits 
Channel 400 of Block 1, LINKALL automatically 
switches to Block Address 17. At Channel 400 of 
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Block 17, LINKALL switches to Block 39, and 
so on, in a continuous loop until the autoscan 
process is stopped by you. 


Block selections will be retained until you change 
them, even when power 1s off. No external 
computer control is needed. The module is totally 
contained in the scanner with only one toggle 
switch for mode selection. 


A]l operating controls use the existing front panel 
keypad of your scanner without disrupting 
existing scanner functions. 


Installation is EASY ,with fully illustrated and 
concise directions. Friendly and helpful technical 
support is also available if needed. A six month 
warranty is standard. Expert installations are 
available for those who don't have the time or 
inclination to do it themselves. 


LINKALL is very affordable. For current prices 
and availability on LINKALL, and other technical 
services/products, send a SASE to: 


Mark Persson 
1369 Lombardy Blvd. 
Bay Shore, NY 11706. 


16,000-ch EXTENDED MEMORY FOR 
THE PRO-2035 


IC-502, the stock memory chip in the PRO-2035. 
is an uncommon but conventional static RAM, 
configured as 8k X 8 (64k). Consider then, if 8k X 
8 yields 1.000 channels. a drop-in 32k x 8 
replacement wil! yield 4,000 channeis and with 
only slightly more work, a 128k xx 8 SRAM will 
yield 16,000 channels! I see no reason to mess 
with the measly 4,000 channels when 16,000 are 
much better and, for many of us, will eliminate 
one more trip back inside when we mn out of 
room a year or two later. 


If you insist on the 4,000 channel mod, refer to 
back issues of Monitoring Times magazine and the 
World Scanner Report where the details were 
published. The material on memory mods for 
scanners on the previous pages will also be 
helpful. 


This presentation goes for the gusto. In a way, it 
virtually eliminates running out of memory in the 
future. Of course, we’ ve said that before... but 
there’s never too much! 


Now don’t get me wrong, the PRO-2035’s 
factory-stock 1,000 channels are ample for many 
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needs. 4,000 channels are even more ample. The 
problem is ihe organization of 1,000 channels into 
ten banks of 100 channels each. 


Banks are not subdivided. so we're limited to ten 
easily memorized configurations of related 
frequency groups. While some channel 
configurations that are arranged logically bv 
subject matter will not exceed 100 channels, many 
will. This reduces the available logical Banks to 
nine or fewer, depending on how you like to 
organize. If vou're an avid scannist. a typical 
organization of 1,000 channels in ten Banks may 
not be comfortable. 


There's no way ro program the PRO-2035 with a 
wide diversity of interests and sa) have a logicai. 
effective organization of the programming. The 
Bank limitations of the scanner will stop you dead 
in your tracks before you start. Youll have to 
accept a Serious Compromise in the organization. 


Sarious scannists seek to eliminate compromises. 
We want it all! 16,000 channels may go beyond 
immediate needs, but the 160 Scan (and Search) 
Banks that are a byproduct of this Extended 
Memory are not at al} exorbitant! 


FURTHER CHANGES FOR THE 
PRO-2035 


These instructions are expressly for the 16,000 
channel, 160-Bank, and 16-Block Extended 
Memory using a 128k x 8 SRAM (because of 
incredible ease and low cost). 


For those not familiar with Extended Memory 
mods, you should probably get up to speed by 
reviewing my Scanner Modification Handbooks. 
And don't grumble about having to "buy another 
book,” either! 


For one thing, I can't put everything into one 
book unless you're willing to pay a lot more 
money. Two. it’s dumb to be repetiiious. Three. 
check out the price difference between a 20 
channel scanner and a 200 channel scanner. 


The modest cost of a second book and the proper 
service manual will be offset bv the thousands of 


extra channels you will gain from mv prescription. 


Meanwhile, the insiructions here are adequate 
unless you like to solder with a welding torch. in 
which case discretion might be the better part of 
valor. You caa always hice someone to do it. 
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| PARTS AND ECONOMICS 


Cost of this modification will include about $35 
for the SRAM chip; $10 for the switches, and a 
quarter or so for the resistors. Call it $50 for the 
whole enchilada. That's a penny per three 
channels. Don't you wish a 20 channel scanner 
Cost 74? On the other hand, who wants a 20 
channel scanner? 


Pick up a low-power 128k x 8 SRAM. Speed is 
not too 1mportant, 150-ns or faster will do. Low 
power (LP) raung is important. The replacement 
SRAM should be the surface mount (SMT; style. 


The Samsung KM681000ALG-$ is ideal for this 
project but any pin-for-pin equivalent from most 
any manufacturer wil] do. The Samsung part 
number can be cross-referenced by your supplier 
if they don't stock that brand. Try Future-Active 
Electronics, (800) 757-9438, if you don't have а 
favored supplier. If your resources fail, contact 
me on my BBS and Į may be able to direct you to 
a Source. 


You'll also need four SPST toggle switches 
(Radio Shack 275-624) and four small 100k 
resistors (Radio Shack 271-1347). 


Okay... got everything? Let's get started. 


PROCEDURE 


Disassemble the Logic/CPU board so that you can 
fully access IC-502, the resident SRAM. 


Access to the PRO-2035's Logic/CPU board is 
painless and fairly easy. (Everything else in this 
radio is out in the wide open spaces; no 
disassembly required!) Remove external AC or 
DC power before Jaunching the invasion. 


Remove the four screws that hold the front panel 
to the chassis; disconnect al! cables that go from 
ihe front panel to various places around the 
receiver. Unscrew the black ground wire from ihe 
main chassis, 


NOTE: Memory will be lost if and when 
CN-50? is disconnected from the main 
receiver board for more than a few seconds. 


For this Extended Memory mod, that's 
acceptable — you've got a lot of re- 
programming to do anyway — but expect it. 


Memory Mods 


For other kinds of work in this area. you nughr 
not want to lose memory. If so, you can leave 
CN-502 plugged in with the understanding that 
the Memory Battery will be providing “keep alive" 
power to the Logic/CPU board and therefore 
there's risk of serious damage if you aren't sure of 
what you're doing. One ZAP and the party's over! 


Disconnect CN-502 jf you have any doubt. 
Disconnect it anyway for this MEMORY 
modification. 


Remove the four screws that hold the metal shield 
over the Logic/CPU board and carefully lift up 
and remove the shield. Remove the two remaining 
screws that hold the Logic/CPU board to the front 
panel. 


Now comes the only tricky part: the Logic/CPU 
board remains held tight to the front panel by 
virtue of that white 15-ріп connector, CN-503, 
much in the same fashion that secures the 
PRO-2005/6 Logic boards in their front panels. 
You will have to “jiggle” and work the board up 
and off the 15 male pins of the keyboard PCB 
underneath. 


You can slip a flat-blade screwdriver under the 
Logic Board to apply gentle. leveraged prving. Be 
careful and patient as you work the board up and 
off the pins below. 


This process 15 harder то explain than to show, but 
vou' re there and I’m here, so bear with me and 
use vour imagination. It might help to have the 
unit open in front of vou as you read this. 


PIN-LINE AGAIN 


When the Logic/CPU board 1s free, vou can 
commence with any of the varicus retrofits. 
Adjaceni to CN-503 are 15 unused, plated-thru 
holes that scream for a purpose! 


J suggest you insert and solder a 15-pm strip of 
pin-line sockets to facilitate EASY connection of 
things to CN-503 later down the line. The metal 
shield has to be "nibbled" or notched out about 
0.5" to leave room for this strip. 


Any number of devices and mods may later 
connect to CN-503, from computer interfaces to 
Search and Store modules, or even a remote 
control! There is no sense in soldering anything 
directly to CN-503, nor mechanically inserting 
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pins into it when there is the convenience of those 
holes adjacent to the connector. 


A Strip of pin-line sockets will make fumre work 
in this area a piece of cake! Even though not 
required for this Extended Memory mod, as long 
às you have access now. do it! 


REMOVING THE OLD SRAM 


Locate and remove IC-502. If vou're good at 
desoidering, vou can try to remove this chip 
without destroying it. 


Otherwise. the best bet 15 to first snip each pin 
close to the body of the chip and remove it before 
ever heating the pads. 


Then carefully desolder the cut pins from the 
pads. Clean the pads so they are smooth and 
shiny. using your soldering pencil апа 
desoldering wick. 


The hardest part of this job is removing the stock 
SRAM chip and that wouldn't be so woublesome 
except it's vital to preserve the integrity of the 
solder pads. This is not difficult; just slow down 
and take your time. Liberal use of desoldering 
wick before exerting force on the pads will help. 


Clip the pins away from the body of the chip 
before applying heat to the pads io reduce chances 
of damage to the pads. 


This destroys the stock SRAM chip, but so what? 
Y ou have no use for it anyway. See the previous 
extended memory procedures for details on how 
to remove the stock SRAM intact. 


The job's a piece of cake hereafter. 


PREPARING THE NEW SRAM 


Identify pins 1-3, 28, and 31-32 of the new 
SRAM chip and carefully bend or work them up 
so they protrude straight out the side of the chip 
and so they will be well above the contact points 
of the remaining pins. 


These pins will not be soldered to the Logic/CPU 
board, and must not touch the corresponding pads 
beneath them. Let these six pins "float" even with 
or slightly above the body of the chip, but no 
higher. Don't break them! 
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Figure 4-5: Straightening and configuring the SRAM IC’s “feet:” 


АЫ 


Using flat, "duck-bill" pliers or something 
comparable, straighten the "feet" of the remaining 
26 pins of the new SRAM chip so that they point 
straight down. This is necessary because the new 
chip is wider than the stock chip by enough that 
the "feet" of the new chip will not seat well on the 
stock pads. The fit will be perfect if these “feet” 
are straightened first. Examine Figure 4-5. 


INSTALLING THE NEW CHIP 


Position the new chip on the existing solder pads 
in exactly the same orientation as the ald chip. 
Refer to Figures 4-6, 4-7, and 4-8. Pins 16 and 
17 of the new chip should be seated on pads 14 
and 15 for the old chip. When the match is 
perfect, lightly tack pin 16 to pad #14. 


No board traces go to new pins 1-2 and 31-32, 
but these pins should "float" above the board 
anyway! Ensure that the chip's pin 28 floats! 


Adjust the chip, if necessary, so that the remaining 
25 pins are matched square on their pads and 
lightly tack-solder pin 17 to its pad. Now the chip 
should be immovable on the board. If the 
remaining 24 pins are still perfectly matched to 
their pads, then solder them to their respective 
pads, one at a ume, making sure each is clean and 
perfect before doing the next one. 


When you're finished, pins 1, 2, 3, 28, 31. and 
32 should be well above their pads, touching 
nothing. 


ADDING PARTS 


Carefully solder 100kQ resistors (1/8 watt, with 
thin and flexible leads) to free-floating pins 2. 3. 
28, and 31. Solder the free ends of these four 

resistors to any PCB ground. or to pin 16 of the 


Unmodified Chip ош 
а 


Pin #1 Dot 
Reference 
Notch 


Wider chips fit beter 
Modified 


Pin bent 
oul to side 
See texi 


“Feet” 
straightened 


new chip if you’re not sure. See Figure 4-6 for the 
schematic, but pick the physical arrangement 
yourself. When you bend the resistor wires, 
minimize the stress on the chip’s pins. 


Position the bodies of the resistors against the flat 
surface of the PCB and secure them with dots of 
superglue or hot glue. This is to ensure that they 
are Immovable and do not subsequently break off 
the pins of the SRAM. 


WIRING 


Solder flexible, insulated hookup wires, about 12" 
long, one each to the leads of the resistors that go 
to the pins of the SRAM. 


Position these wires flat against the PC board and 
secure with a dab of hot glue. Let the loose ends 
of these wires float free for the time being. 


RE-ASSEMBLY 


Reassemble the Logic/CPU board into the front 
panel in reverse order of removal. Reinstall the 
front panel onto the scanner. 


Route the hookup wires installed in Step 10 to 
wherever you plan to mount the four Block 
Switches (you did plan ahead, right?): most likely 
you decided on the rear panel if you're using 
conventional switches, or inside the front panel if 
you have planned a way to install micro-mini 
toggles there. 


I like to use DIP switches for memory mods and 
other things. There is a bit of room on the front 
panel of the PRO-2035, if you'd like to use this 
approach. Be careful, and continue to plan ahead. 
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Figure 4-6: 16,000 channel extended memory for PRO-2035 
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QUICK START 


1. Remove !C-502 and clean its solder pads. Install a 


128k x 8 SRAM as shown, pin for pin, except that Pins 1-3. 
28, and 31-32 must NOT be soldered lo the old pads. 

Keep these 6 pins elevated above the pads! Pin 1 not used. 
Pins 16 & 17 of the new chip reference lo pads 14 & 15. 


2, Install four 100-k resistors as shown. 

3. Install four SPST toggle swilches where desired. 
4. Wire switches as shown (or use KMBC, Mod-28) 
5. Consult text when in doubt 
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CONTINUING ‘ASSEMBLY 


Install the four switches at your choice of location. 
Solder a jumper wire from end to matching end of 
the four switches. Leave the other matching ends 
free. 


Solder a hookup wire from the jumpered ends of 
the four switches to the OUT lug of IC-8, located 
in the front-left comer of the main receiver board. 
(regulated 45V). 


Solder the wire from the SRAM, pin 28 to the free 
lug on one of the switches that you designate as 
SW-1. Solder the wire from pin 3 10 the free lug 
on the switch that you designate SW-2. Solder the 
wire from the SRAM, pin 31, to the free lug on 
one of the switches that you designate as SW-3, 
Lastly, solder the wire from the SRAM, pin 2, to 
the free tug on the switch that you designate as 
SW-4. 


This completes the work! Clean up any mess to 
where you can safely test the scanner. Check all 
your work under a magnifying glass and strong 
light. Watch for solder-blobs and cold solder 
joints (they look grainy and dull). CAREFULLY 
inspect your work. 


NOTE: In lieu of toggle or DIP switches, you can 
use the Keyboard Memory Block Controller 
(KMBC), MOD-28, featured in Vol-2 of my 
Scanner Modification Handbook, The KMBC 
provides a method by which you press two keys 
of the scanner's keyboard to auto-switch among 
the memory Blocks. Slick! 


The CE-232 Scanner/Computer Interface' s User 
Switches or OutByte bits can also be used to 
control Extended Memory Blocks! 


TESTING & OPERATION 


Put the Block Switches in the OFF position. That 
is the Home Block (Block 0) or the first 1,000 
channels. Test the scanner for all functions and 
programmability. Program 1000.000 into Ch-1. 
Troubleshoot, diagnose, and fix any discrepancies 
before moving on. Problems (if any) wil! typical]y 
be solder blobs or bad solder joints on the pins of 
the SRAM. 


When all is well, turn on Block Switch $1; tum 
the scanner OFF and then back ON. Whatever 
random data (noise) was in Ch- should disappear 
and be replaced by 0’s. Program 1001.000 into 
Ch-I. Turn OFF Block Switch #1 and Block 
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Switch #2 ON. Turn the scanner OFF and then 
back ON. 


Whatever was in Ch-1 should disappear and be 
replaced by 0’s. Program 1002.000 into Ch-1. 
Tum both Block Switches 1 and 2 ON. Turn the 
scanner OFF and then back ON. Whatever was in 
Ch-1 should disappear and be replaced by O's. 
Program 1003.000 into Ch-1. Repeat this 
procedure for the remaining Blocks 4-15. 


Now turn all Block Switches OFF; press 
MANUAL 1 MANUAL, in that sequence, 
and 1000.000 should return to the display. You 
can now test each of the switch positions, one at a 
time. to ensure that whatever was programmed 
into Ch- I is retained. If so, all is well. You can 
now prepare a much better organization for your 
Monitoring Plan. 


Operation is simple: the four Block switches offer 
16 combinations (count 'em), of 1,000 channels 
and 10 banks each, which is like having 16 PRO- 
2035's, except that only one at a time can be in 
use. Still, that gives you 16,000 channels and 
160-banks for under $50. Beat that! 


Well. I suppose the 25,600 channel Extended 
Memory for the PRO-2004/5/6 series beats it. 
You're done. 


Or are you...? 


DOUBLE-BUBBLE, TOIL AND 
TROUBLE 


Figure 4-7: Stacking memory chips 
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ОРТІОМЅ 


If you want to go completely hog-wild, you can 
stack a pair of 128k X 8 SRAM circuits (double 
everything), pin for pin, except that pins 22 of 
each chip which must be raised and isolated from 
everything else, and wired per Figure 4-7. 


This little hack provides 32,000 channels in 32 
Blocks of 1.000 each. You'll also get 320 Scan 
Banks and 320 Search Banks for the modest extra 
cost and effort. 


Incidentally. this procedure can be employed to 
double any stock or extended SRAM memory. 

You need only double up on the chips, pin for 

pin, except isolate the chip-enable (CE) pins of 
each chip and wire them to an SPDT switch as 

shown. 


Extended address pins/switches must be kept 
separate, of course. 


What's the limit? I dunno. If you hit a brick wall 
somewhere let everyone know on my BBS. 


Figure 4-8: PRO-2035 logic board connections 


Super-glue or aot-glue the 
bodies of the four resistors 
to the PCB so that they are 
immovable This will 

ensure thal the pins of the ү 
new IC аге not broken ой. i 


Grounds for the resistors 
can be found all over the 
PCB, including as shown. 


Keep the resistors "low 
profile” for best results. 


EXTENDED MEMORY FOR THE 
PRO-43 (and certain other scanners) 


The PRO-43 is a class act, and one that uses a 
different sort of memory storage than most other 
scanners: EEPROM. Electrically-Eraseable 
Programmable Read Oniy Memory, sometimes 
called E'PROM, just hasn't found its way into 
hobby radio to any appreciable extent, and is used 
for main memory in the PRO-43, PRO-2036, BC- 


: of Pintine sockets in 
these holes to facilitate 
future mods that need 
connections to CN-503 


Overlay a 128k x 8 
SRAM onto IC-502's 
pads as shown here 


8500XLT, BC-2500XLT, BC-200XLT, and BC- 
100XLT. The BC-9000XLT probably uses 
E'PROM, but that’s a guess because I haven't 
ripped one open yet. Reader comments on that? 


No matter, memory extension procedure for 
E?PROM scanners is pretty standard, so the 
discussion here for the PRO-43 will serve as a 
guide for the rest. If you're not certain about the 
type of memory chip used by your scanner, then 
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check the preceeding discussions of CPU and 
SRAM memory, and then continue to read for tips 
on identifying E7PROM chips. 


IDENTIFYING EEPROMS 


As you can see, several different formats are used 
by the industry. 


CAUTION: When handling any E’ PROM 
devices, exercise extreme care to maintain the 
same electrical potential as the chip. At all costs, 
avoid static. ESD can kill one of these chips, . 
and you won't know it till you try to get it to 
remember. For precautions, read the static 
warnings atthe front of the book. 


The PRO-43’s ЕРКОМ5 (two of 'em) look like 
this sketch. They are tiny 8-pin surface-mount 
chip about the size of a housefly. 


Figure 4-9: PRO-43 E'PROM layout 
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The E'PROMs in the BC-100/200XLT look like 
those in the PRO-43, but differ in pinout, storage 
capacity, and organization. 


Figure 4-10: BC-100/200 E'PROM 
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The E PROM below is used in the BC-8500XLT 
and the PRO-2036. Yes, the two are twins of each 
other, and we'l] know soon enough if it's also 
found in the 9000. Circuit symbols may differ, 
but they're the same rig, and from the same 
manufacturer. 


Incidentally, the Uniden Service Manual, on page 
13, makes an error regarding the pinout for this 
chip. The function of pin 14 is incorrectly depicted 
as "I/O 3" — it should be "Ground", and the row 
of pins 15-28 was inverted somehow. The figure 
IS Correct as seen from the top. 


Figure 4-11: BC-8500 (& PRO-2036) 
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This is another style of EEPROM, in this case 
from the BC-2500XLT. I wish I could tell you 
more about this chip, but Uniden’s Service 
Manual for the BC-2500XLT was never intended 
to let the reader decipher some of the details. 


Figure 4-12: BC-2500 layout 
BC-2500XLT 
e 


24LC16l/SL 


Memory Mode 


107 


A GENERAL APPROACH TO E PROM 
EXTENDED MEMORIES 


Before we dig into the PRO-43, let me tell you 
how to do the rest of the pack and then you can 
follow the diagram and approach for the PRO-43. 
The procedures will not vary from one scanner to 
the next, other than the mechanics of disassembly 
and physical installation of things. 


The first thing to do is get a second EPROM (or a 
pair, depending on whether your scanner uses one 
or two). identical to the one in your scanner. In 
many cases. the only way you'll be able to get one 
is direct from the manufacturer of your scanner as 
a replacement part. That is one good reason why 
you need the service manual! It lists part numbers, 
SO you can't go wrong. 


E?PROM differs radically from SRAM because 
you don't just hop out and buy a bigger chip. For 
one thing, there probably aren't any bigger chips 
of the same general type as your original: and even 
if there were, it would be à nightmare to do the 
upgrade. EEPROM just doesn't work like SRAM 
and requires a different method of handling and 
hacking. 


On the other hand. Extended Memories using 
EEPROM are going to 5с quite easy for the most 
pan. because the nara part has already been 
done. . me telling vou how to do it. K's generally 
harder to talk about than to do. 


You see, all vou do is "ptggy back" the 
EEPROM(s) that reside in your scanner with 
another, pin for pin, except for one. Some 
scanners, like the PRO-43 and the BC-200XLT. 


use (wo EEPROMSs while others use just one. 


MULTIPLYING EEPROMS 


The approach is to “piggy back" another EPROM 
atop the original(s). and solder down each pin to 
the one below it... except for the CE or CS pin. 
(Chip-Enable or Chip-Select). This pin on each 
EEPROM must be kept separate from its brother. 


In fact, you have to go so far as to lift or isolate 
the original CE or CS pin from the circuit trace 
and let it hang free... just like the one on the 
upgrade chip(s). The conclusion to this process is 
to switch the CE or CS pins, with one or the other 
acüve at a time. This results in double the memory 
that you had before. 


—— ———— —— ——————— 


There is no real limit to the number of EEPROM 
chips that can be stacked or piggy-backed, so long 
as only one js set active at a time. Basically, this 
means that if the CE or CS pin is low (OV), the 
chip will be inactive, and when that pin is high 
(+5V), the chip is active. Obviously, then, only 
one EEPROM chip (or pair) should be active at a 
time, and therefore all CE/CS pins should be 
"low" with exception of the chip(s) required to be 
active for the desired functionality. 


The procedure I'm presenting for this section 
shows just one extra EEPROM chip per stock 
chip. but you can triple, quadruple. ad nauseam. 
the number of stacked chips so long as only one 
CE/CS pin at a time is active-high. The CE/CS 
pins in those scanners that use two EEPROMS. as 
the PRO-43 and BC-200XLT do, will put a pair 
of chips at a time active-high. 


^CHIP ENABLE" or "SELECT" PINS 


There are two ways to isolate the CE/CS pins of 
EEPROMS. Perhaps the easiest is to just slice the 


| circuit trace that goes (о the CE/CS pin. A second 


way calls for the pin to be desoidered from the pad 
and raised up so that it doesn’t touch anvthing. 


t This is the most certain tsolaiion, but is more 
| difficult and risky. The first technique is easiest, 


but you'll have to determine if the circuit (гасе 
dead-ends at ihe chip's CE/CS pin or conünues on 
somewhere else underneath the chip where you 
can't see. Again, the service manual will be of 
great assistance. 


The next step calls for a 100kQ resistor to be 
installed from ground to the floating CE/CS pin of 
each EEPROM to be used, stock and new. These 
resistors can and should be as small as possible 
with '/ or '/, watt quite suitable. The purpose of 
these resistors is to "pull down" the CE/CS pin to 
a low (inactive) state whenever +5V is not applied 
to the pin. Hence. these resistors are often called 
“pulldown resistors.” Study Figures 4-13 and 14 
and you'll catch the idea righteously quick. 


The last step is to install a switch to apply +5¥V 10 
the CE/CS pin(s) that you want to go active, 
arranged in such a way that only one chip or 
matched pair of chips can be active at a ume. 
Unpredictable and possibly embarrassing things 
may happen if both the stock and extra chips are 
active at the same time. 
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Figure 4-13: PRO-43 extended memory schematic 
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FINDING ROOM 

The PRO-43 and similar compact handheld units 
lack “real estate” on which to install a big ol’ 
DPDT switch. In those scanners that use just one 
E’PROM chip, the switch need only be an SPDT 
type, but those with a pair of E'PROMS will have 
to be controlled with a DPDT switch. 


For these cases, I’ve specified a solid-state 4066 
quad CMOS bilateral switch to do the difficult 
switching for you. with control by a simple SPDT 
switch that has a better chance of finding a nice 
home in that confined space. 


The 4066 chip is not exactly mandatory, but 
believe me, it will make for a cleaner installation 
allowing you to place a micro-mini SPDT switch 


Figure 4-14: The PRO-43 layout 


Cut circuit traces to each of pins 3 at IC-2 and IC-3 as shown at the “Xs”. 


Create solder pads as shown at o 


almost anywhere that wall fit. А DPDT switch 
won't fit just anywhere. 


Some people may be tempted to use the original 
KEYLOCK switch for this purpose and that's 
fine, except that my hacking philosophy hates 
giving up any functions to gain others. 

That KEYLOCK switch is valuable at times and 
there is no sense in doing without. Don't use it 


unless your mind is made up - and if that's the 
Càse, you're on your own. 


That will work, but something e/se is now 
missing. 


Well, let's get on with it. 


по 


Cheek’: The Ultimate Scanner 


THE CHALLENGE 
You want the truth, right? Okay... 


Extending the memory of the PRO-43 is do-able, 
but it is definitely a job for the most competent and 
patient hacker, with the right tools and the right 
attitude. X-ray vision will help, also. 


Space is cramped, and there are 677 ways to blow 
the brains outa that scanner. 


Гуе done it. So have others. But this jewel of a 
scanner doesn't deserve to be hacked to death. So 
if you're taking on this job, be certain that you're 
willing to put in the time and effort it needs to 
have a reasonable chance of success. No, I'm not 
dooming you to failure — just ensuring that if you 
Screw it up you won't come yelling at me. 


On the other hand, everyone's watching and 
wanting to learn more about this mod. So if you'll 
Share your experience with your fellow scannists, 
we'll al! benefit. 


PROCEDURE 


If you have no other mods down there apart from 
the cellular and 54-88MHz restoration, then you 
might have few problems. Just get the exact 
replacement chips so that pin compatibility is 
assured. Then, you can piggy-back the two new 
EEPROMS atop the old ones to minimize extra 
wiring, and you'll conserve valuable real estate. 


Get two AK93C67F from Tandy 800-442-2425: 
IC-2 and IC-3 in the PRO-43. If you can find a 
plain 93C67F, it’s usually less expensive than a 
Tandy part. I haven't located a good source, so 
keep Tandy in mind — and about $30 in hand... 


GOING FOR IT 


First you must tear down the PRO-43 to the 
Logic/CPU board. It does not have to be removed 
from inside the front panel, but it is definitely a 
job to get to the top side of the Logic/CPU board. 
Here’s how: 


Remove the battery, antenna, and rear plastic 
cover (four screws). Remove six screws that hold 
the top circuit board in place. Using a vacuum- 
type solder sucker, remove the solder from the 
antenna wire that protrudes through the board. 
And here’s a little advance warning: more than one 
hacker has forgotten to resolder that antenna lead 
when re-assernbling. Sorta reduces sensitivity... 


Look between the boards to see the bare wire that 
goes from the antenna BNC connector up through 
the top board. 


Do not unsolder that wire from the BNC 
connector! Just remove the solder around it from 
the top board so that it is loose in the hole. 


Unsolder and bend the antenna ground tab fully 
up from the board. 


Carefully lift the top board, unplugging the black 
connector at the base, and lay the board aside on 
its bundle of colored wires. 


Remove the two screws from the next board and 
lift it, unplugging the white connector at the 
bottom. 


Lift it up and lay it aside on its brown wire 
(unplugged if necessary). Desolder one corner at a 
time and remove the metal shield from the 
Logic/CPU board, to expose the working area. 


PRO-43 SURGERY 


Identify the two circuit traces that go from pin 3 of 
each of IC-2 and IC-3 to the CPU. 


Cut and isolate each pin 3 by slitting and removing 
the circuit trace that goes up to the pins. Pin 3 of 
each chip must not touch anything other than the 
pad to which it is soldered. 


Prepare a solder pad for each trace that goes to the 
CPU. There are unused solder pads on each trace 
from IC-3 and IC-2 to the CPU which can be 
used. 


Preso)der each feed-thru pad so that solder 
adheres well to it. Locate a place in which to 
install the SPDT switch. 


J am still working to smooth this procedure, and 
prototype versions of a mod are a lot different 
from the final result. Find any reasonable place to 
install a micro-mini SPDT toggle switch. There 
are many possibilities, from a magnetic switch to a 
pair of mini DIP switches to a regular toggle 
switch. There isn't room for a conventional switch 
of any kind on the top control panel. 


INSTALLING THE NEW MEMORY 
Review Figure 4-13 and Figure 4-14 carefully, 
and lay out the parts to comply with them. 
Position the two replacement EEPROMs atop the 
stock chips, pin for pin, and lightly solder each 
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new pin to the old one below. except for pin #3 of 
each chip that must float free and touch nothing. 


Solder a wire from the CENTER (common) lug of 
the switch to either pin 2 of IC-2 or IC-3, or io 
one of the trace pads on the path between the two 
pins. 


This is a source of +5V needed to switch the CE 
pins of the old and new pairs of EEPROMs. Look 
at the area just right of the CPU and to the right of 
IC2 and 3. viewed from the radio backside. 


There is an open space where the 4066 chip can be 
laid out. dead-bug style. Turn the 4066 upside 
down; and flatten its pins ro the side. 


Temporarily replace the metal shield and upper 
circuit board so you can see where things can 
comfortably lay flat without bothering anything. 


At what appears to be a great spot of real estate. 
the HEADPHONE jack will stop you dead in your 
tracks. Look it over, and then forget it! 


Now's the time to trim the shield to allow for the 
piggy-backed EEPROMs, as needed. Check for 
perfect fit of everything before continuing. 
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| FINAL ASSEMBLY 


Take your time and inspect everything very 
carefully. Recheck the instructions, because you 
really do not want to go through this agam. 


When everything looks like it will go together. 
continue the final assembly. Triple check the 
orientation ot the 4066 chip, and attach it with a 
drop of super-glue то the PCB. 


Add the six resistors, and wire everything 
according to the diagram. The six resistors should 
probably be soldered to the 4066 pins. 


And what do you get for al) this effort? The PRO- 
43 15 already one of the best scanners ever made. 
This just makes it better. 


Is it the Ultimate Scanner? 


Well, if it's wired to your computer it would bc. 
But since it's not, it's no more than excellent. 


But one of these days... 


8 
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The end! 
This is the butt-end of a TurboWhopper PRO-2006. Do you think tbat's 


really a power cord sneaking out of the left (your left) side? 
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SUBSIDIARY CARRIER 
AUTHORIZATION (SCA) 


READ CAREFULLY: 


SCA is a type of FM programming that you 
are not intended to receive. 


The intercept of an SCA program without 
prior authorization from the broadcaster ts 
forbidden by the Electronic Communications 
Privacy Act (ECPA) of 1986. 


Violators may be subject to criminal or civil 
prosecution. Okay... now that you’re wamed: 


WHAT 15 A SUBCARRIER? 


The high fidelity industry, and FM listeners in 
general, use a subcarrier technique to support 
broadcasts available in almost all areas of North 
America. We call it FM stereo. 


FM subcarrier broadcasting was first 
demonstrated in 1953 by its incredibly prolific 
inventor, the late Major Edwin H. Armstrong. 
Multplexing of more than one program on a 
carrier was authorized by the FCC in 1955. 


You're receiving a subcarrier whenever you listen 
to commercial FM stereo, because the difference 
between right and left channels is carried in that 
subcarrier signal. 


Your tuner simply applies that difference to the 
primary FM signal, generating separate left and 
right signals that go to amplifiers and then 
speakers. 


Virtually ignored by the consumer press. and by 
the usual listener, is another sort of subcarrier 
broadcast... SCA. 


..AND WHAT ABOUT SCA? 


There is a muddy distmcuon between FM-SCA 
and FM stereo, both of which are transmitted 
simultaneously on the same frequency, from the 
same FM station. FM-Stereo and FM-SCA are 
both “multiplexed” transmissions. which means 
there's a primary signal plus one or more 
secondary signals that carry specialized data. 
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Any FM broadcast receiver can detect SCA with a 
simple detector, modification, or adapter. Many 
FM stations supplement regular programming 
with SCA because of the profitable things that can 
be done with this interesting medium. 


SCA can be received as clearly and reliably in the 
loca] service area as the regular FM signal, and 
with excellent audio fidelity. 


The two most common subcarrier frequencies are 
67kHz (the original one), and 92kHz (a more 
recently authorized subcarrier). One FM station 
can simultaneously transmit four signals: the 
regular stereo program, two music or voice 
programs on subcarriers, such as a radio reading 
service for the blind at 67kHz, and foreground 
music at 92kHz. There is a relatively new 
subcarrier at 57kHz, exclusively for digital data 
such as highway condition alerts and paging. 


By the way, the term "SCA" is synonymous with 
"SCS,” Subcarrier Communications Service. 
Canada has a similar service called SCMO. 


SCA js a monaural signal with bandwidth up to 
7kHz. or a bit better than the best AM stations. 
Tuning an SCA transmission is simple. FM-SCA, 
however, is not intended for public reception, and 
conventional FM detection methods will not work. 


This is why the "pay as you listen" concept of 
SCA works. The intent is to provide a paid 
subscription service similar to cable TV, but 
broadcast over the air! FM-SCA stations typically 
rent or lease a special receiver that is internally 
tuned and locked only to their frequency. 


LEGALITIES 


When the ECPA of 1986 was concocted, the FM 
Broadcast Industry jumped on the bandwagon to 
have SCA brought under protection of the Act. 
Sometimes it's very good to have a powerful 
lobby working for you, even if it may be against 
the interest of the majority. 


The lobby of the Broadcast Industry was 
apparently more effective than other lobbies. It's 
lega! to use a back yard satellite dish antenna to 
receive non-scrambled network transmissions. It's 
also legal to copy API and UPI and other 
copyrighted transmissions from the HF bands. 
It's legal to listen to police broadcasts, and to 
military ауаз, 


But it is egal o intercect SCA broadcasts! The 
power of money never ceases to amaze me, as it 
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produces laws against the monitoring of certain 
radio waves that pass across your property, into 
and through your home and body. Yet, radio 
waves generated by less pohtically powerful 
industries may be legally monitored. 


Apparently it is not illegal to own radio equipment 
that can intercept SCA transmissions incidental to 
the main purpose of the receiver. 


There might be legal jeopardy if your radio were 
designed solely for reception of subcarriers, but 
that's for the lawyers. The bottom line is that 
without an adapter or the special SCS receiver that 
the industry rents out, you cannot legally detect 
any but the normal programming. 


PERMISSION 


Monitoring of specific SCA transrnissions can be 
made legal if you have obtained from your local 
broadcaster(s) authorization to do so for non- 
commercial hobby purposes. Whether you can 
actually get such permission is not certain, but it 
has happened. 


If the interesting world of SCA appeals to you, 
there is a simple and low technology way to 
modify PRO-2004/5/6 scanners and regular FM 
Broadcast receivers to detect subcarner signals. 


То make listening legal, draft a letter to the FM 
Broadcast station owner/manager. Explain that 
you are a radio hobbyist, interested in modifying 
your scanner to detect their subcarrier(s). Explain 
that you will neither record nor disseminate the 
program material and that the intercept will be 
solely for your hobby use. Enclose a return letter 
prepared for signature, and a stamped envelope: 
make the response easy. 


When permission is granted, you can proceed, 
and with good reason! 


SCA programming has broadened since 1977, 
when the majority of SCA was used for 
background music in elevators, stores, and 
dentist's offices. 


Now. radio reading services to the blind are found 
in most metropolitan areas, usually on the 
subcarriers of public broadcast stations (PBS). 
Ethnic programming has entered major markets on 
either the 67 or 92KHz subcarrier. 


Foreground and tight rock music predominates on 
92kHz, while many stations have an easy- — 
listening SCA signai at 67kHz. With ine demise of 
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easy-listening on many commercial FM-stereo 
stations, SCA may be the only way to hear that 
format in some areas. In some regions of the 
country, sports news, religious programs, medical 
data, and special events can be received on SCA. 


А cost effective way to listen to SCA 15 with an 
FM-SCS adapter fitted to your FM receiver. 
Installation of an SCA adapter into a scanner with 
FM broadcast-band capability is not a complicated 
procedure and does not require technical expertise. 


The rest of this section focuses on how to build 
and install SCA in your PRO-2004/5/6 scanner. 


SCA KITS AND SERVICES 


After receiving permission to detect SCA signals 
from the appropriate station, you can roll your 
own from the information given in this chapter or, 
if you don't have the time and energy, you can 
buy what you need. 


The following company offers SCA adapter Kits 
and installation services for your scanner or other 
FM receiver: 


FM ATLAS Publishing & Electronics 
PO Box 336 
Esko, MN 55733-0336 


'This company offers two inexpensive, easy to 
assemble and install SCA adapter kits, the ELF- 
LA and the ELF-II. The best tonal quality is 
available from the ELF-1A, but unfortunately, 
each unit supports detection of oniy one of the 
three possible subcarriers. and you must make the 
choice when you place your order. 


The ELF-II has a tuning control that allows 
subcarrier selection, so for the scanning hobbyist, 
this is the best way to go. The slightly degraded 
tonal quality of the ELF-II is probably not audible 
from a scanner's speaker, anyway. 


The ELF-II SCA adapter kit consists of an eiched 
and drilled printed circuit board about an inch or 
so square. a 14-pin IC, and about a dozen 
resistors and capacitors. 


The kit does not include a socket for the IC so T. 
suggest you add one rather than solder the chip in 
place. Radio Shack sells them. 


The ELF-II is easily assembled within a half hour 
or so. and special techniques are not necessary. 
The kit includes a trimmer potentiometer to be 
installed on the circuit board, but I suggesi that 


you leave it out and install a comparable pot on the 
exterior of your scanner. That will allow you to 
easily tune the subcarriers. 


There's no significant power dissipated, so any 
25-100k pot will do, whether linear or audio 
taper. 


SCA FOR THE PRO-2004, PRO-2005, 
AND PRO-2006 


The ELF-II board is best installed inside the 
scanner away from the power transformer and the 
speaker where it could pick up interference. 
Otherwise, location and positioning are not 
critical. 


The ELF- board has four wires or extemal 
connections: +8V, ground, SCA-IN, and SCA- 
OUT. 

A DPDT switch (toggle or slide) or a ОРОТ relay 
and an SPST are required to complete the project, 


so that you can switch between regular FM 
programming and SCA as desired. 


The switch and the three-wire tuning control are 
the only necessary external controls, and they can 
be installed wherever convenient. 


The ELF Kit instructions are adequate, but it is 
suggested that even if you buy the kit you follow 
my guidelines for home-brew construction. See 
Figures 5-1 and 5-2. 


ROLL YOUR OWN SCA ADAPTER! 


(Thanks to FM Atlas and Bruce Elving for the 
circuit.) 


If vou are competent with electronic parts and 
soldering, you can whip up your own SCA 
detector board (just like the ELF-U) at low cost. 


A printed circuit board is preferred, but you can 
use "perfboard" with point-to-point wiring for 
similar results. 


Refer to Figures 5-1 and 5-2 for schematic 

diagram and installation hints for the PRO- 

2004/5/6 scanners. Differences between the 
scanners are noted in the figures. 


There's not much that's special about this simple 
circuit. but a few of the parts are critical to proper 
operation, such as the FSK Demodulator/Tone 
Decoder chip ihat's the heart of the SCA adapter: 
the XR-2Z11CP. 
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It's made by: 


EXAR Corporation 

2222 Qume Drive/PO Box 49007 

San Jose, CA 95161-9007 

(408) 434-6400, FAX (408) 943-8245 


I have used 2211 chips from other manufacturers, 
as well, but Exar's is domestic and therefore, 
preferred. 


The XR-221 1CP is available from national 
electronic distributors and 1s not difficult to find, 
but contact me on my BBS if you can't locate А 
supplier. 


You'll need a method to switch the SCA decoder 
in and out of circuit. A simple ОРОТ switch will 
work just fine, but a DPDT relay might even be 
better for some applications. 


I like to install a DIP switch block on the front of a 
scanner, with each switch segment dedicated to 
the control of something specific. There is no 
room on the front panel of the PRO-2005/6 for 
any serious switches and I absolutely loathe 
reaching in behind my scanners to fumble for a 
switch. 


DIP switches are easy to install on the front panels 
of most base scanners, by means of a mating DIP 
socket. DIP switches, however, are the SPST 
variety and worthless for the DPDT needs of the 
SCA adapter. Yet, a single DIP switch segment 
can feed power to the coil of a DPDT relay to 
accomplish the intended effect. A small relay will 
fit somewhere in the scanner that's out of the way. 


PARTS DISCUSSION 


C-5 is one of the more critical parts in the SCA 
adapter and should be the mylar type for best 
results. Radio Shack doesn't ordinarily stock 
mylar capacitors of this size (.001 uF) but their 
“Hi-Q” ceramic disk capacitor might work. C-6 
isn’t critica] as to type, but the value should be 
within the range of 220-270 pF. 


The total series resistance of R-2 and R-3 sets the 
tuning factor for the desired subcarrier. Minimum 
resistance is probably more critical than 
maximum, so R-2 should be not Jess than 4.7kQ 
nor more than 8.2kQ. R-3, the tuning 
potentiometer, may be any value from 25kQ to 
100КО (5060 works for me). 


If you are in the mood for experimenting, you can 
substitute R-2 with a 1OkQ precision trimmer 
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potentiometer, initially set to about 7kQ. R-2 sets 
the upper tuning range limits of the SCA detector, 
but too low a value might blow the chip, so be 
careful. 


C-4 shouid be 0.1рЕ, but C-3 can be considerably 
higher since it’s just for decoupling. LED-1 is 
optional and not necessary, but is useful as a 
visible tuning indicator for center-frequency. 
LED-] can be left out, with pin 5 not connected, if 
you like. 


R-4, R-1, R-5, C-1, C-2, and C-7 are not critical, 
but don't go hog-wild with substitutions. 


INSTALLING THE SCA ADAPTER 


See the above discussion of the ELF-H kit from 
FM Atlas and the figures for connection hints to 
the PRO-2004 and PRO-2005/2006. 


PRO-2004. My procedure deviates from the 
ELF-II kit instructions for the PRO-2004. I 
recommend that you mount the ELF-II Board 
anywhere that's out of the way. Remember: you'll 
be making lots of modifications, and you don't 
want to use up valuable "rea! estate" without a 
plan. You'l] want to install a DPDT switch or 
relay and a 25-100k potentiometer somewhere on 
the case of the scanner. А mini trim pot fits just 
inside the faceplates of the PRO-2004/5/6 with a 
screwdriver access hole. 


The SCA-IN tap in the PRO-2004 is at IC-4, pin 
2. Just solder the wire from SCA-IN directly to 
pin 2 of IC-4. Cut the RED wire at CN-4 and wire 
the two cut ends to the SCA Switch as shown in 
Figure 5-3. 


Wire the SCA-OUT to the switch or relay as 
shown. Power for the SCA Board should be 
tapped from the emitter of Q-32 in the scanner and 
routed to the other section of the switch or relay 
before going on to the SCA board. 


The ground lead on the SCA board can go to any 
scanner ground. Solder three hookup wires to the 
three points for the SCA tuning control and 
connect those three wires to the potentiometer you 
installed, pin for pin. 


HINT: if you study the foils around those 
three holes for the trimmer you'll discover 
that only two wires are really necessary. If 
that confuses. you, use three wires; ít's no big 
deal. 
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PRO-2005 and PRO-2006. You guys have it 
a little easier. Mount the SCA board anywhere out 
of the way. Install а ОРОТ switch or relay and a 
25-100k potentiometer somewhere, probably on 
the rear case of the scanner. 


The critical SCA-IN tap in the PRO-2005/2006 is 
at a small circuit trace that comes from IC-6, pin 
10. Just follow that trace (viewed from the top 
side of the board) for about an inch, to where it 
terminates at an "unused solder pad." Solder 
hookup wire from this pad to the SCA-IN terminal 
on the SCA board. 


Power for the SCA board is taken from the emitter 
of Q-32 and routed through one section of the 
switch before going on to the SCA Board. 


The ground lead on the SCA board can go to any 
scanner ground point. Now locate CN-5 on the 
left-rear Main Board. There is a cable bundle that 
goes from CN-5 to the VOLUME control on the 
front of the scanner. 


Figure 5-1: Schematic, SCA adapter 


SCHEMATIC DIAGRAM 


SCA ADAPTER нес 


Use the LED as a fine-tune 
indícator; brighlest when on c3 
center-frequency! . 


Baseband 
n ыр 


ad scanner. 
PRO-2004: R-1 
IC-4, Pin 3 


PRO-200$/6; 
1C-8, Pin 2 


PRO-2036 
IC-5, Pin 10 


OTHERS: 
Output of WFM 
Discriminator 


@) indicates parts that are critical to proper operation 
Do not substitute - see text. 
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Locate the RED wire at pin #3 of CN-5 and cut it 
at a point halfway between tbe connector and 
where the red wire disappears into the cable 
bundle sheath. Strip and tin the two cut ends and 
then splice a hookup wire to each. 


Be sure to insulate the splices, preferably with 
heat shrink tubing. Route these two hookup wires 
to the vicinity of where the switch or relay will be 
installed. 


Solder three hookup wires io the three spots on 
the SCA board for the SCA Tuning control and 
connect those wires to the three lugs of the new 
potentiometer, pin for pin, on the rear case of the 
scanner. 


Again, two wires will get the job done if you 
study the foils around those three holes for the 
trimmer. 


Now, let's take a look at the ELF-II schematic, in 
Figure 5-1. 


PARTS LIST - ELF-II 


C-1 = 470-pF 
С-2= 470-pF 

С-З = .1-uF 

C-4 = .1-uF 

С-5 = .001-uF Mylar 
C-6 = 270-pF 

C-7 = .01-0Е 


4. 
8. 
10 
68 
100- 


XR-2211CP 
Any color LED 
(Tuning Indicator) 


SCA Tune 


R-~4 
R-5 


SCA 
Audio Out 


Era 


To Input of receiver's volume control 


Ш; 


Figure 5-2 SCA installation hints 
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.. OPDT Switch 
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ELF-II 


SCA In SCA Out 


SCA Adapter 


Board 


OTHER SCANNERS 


The SCA adapter ts a simple board (see Figures 
5-3 and 5-4) that can be successfully installed in 
almost any scanner or radio that covers the FM 
broadcast band, such as the Regency Z-60 and the 
Realistic PRO-2003. There may be others. 


You can contact suppliers of SCA adapter kits, 
and mention the type of scanner or receiver you 
have and ask whether they offer guidance or 
explicit installation instructions for your unit. 


If your scanner doesn’t cover 88-108MH2, forget 
it, or install the SCA Adapter in a consumer FM 
receiver per the kit supplier's directions. 


YET ANOTHER WARNING 


Remember - it is illegal to monitor an SCA 
transmission without the permission of the 
broadcaster. Whether or not you have that 


vut c ALI SS 


SCA Adapter ' Inside top area 
installation 
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PRO-2004: CN-4, Pin 1 
PRO-2005/6: CN-5, Pin 3 
; Of scanner PRO-2035: CN-5, Pin 4 


White 
Wire 


Shield 


PRO-2004. 
1С-4, Pin 3 


PRO-2005/6: 
IC-6, Pin 2 


PRO-2035 
iC-5, Pin 10 


! Cable to Recaiver 
Pa VOLUME Control 


SCA Tune 
Install in front : 
or rear panel | 


To Vol 
Control | 


permisssion, so far you have done nothing 
wrong. You've built the SCA unit, but haven't 
turned it on. Now, if you have that permission... 


OPERATION IS SIMPLE 


Program your scanner for an FM broadcast signal 
known to have SCA programming. Keep the SCA 
switch OFF until you've tuned in the station. 


Flip the ATT switch on the rear of the scanner 
(PRO-2004/5/6) back and forth between the 0 and 
-|OdB positions and select the position that 
produces the best reception of the regular FM 
signal. 

Then flip the SCA switch ON and adjust the SCA 
Tuning Control until a signal pops in. When in the 
SCA mode. you'll hear all kinds of weird noises, 
and maybe even some very distorted signals as 
you adjust the SCA Tuning Control. When you hit 
a subcarrier, though, there will be no doubt that 


you've done something right. That's SCA! You 
may have to turi the VOLUME up a little higher 
than normal, Fine tune for the clearest reception to 
enjoy commercial-free programming. 

If you like, flip the SCA switch ON and OFF to 


ensure that you're receiving two different 
programs. 


Now and again, especially with Muzak™ 
programming, there will be occasional silent 
pauses for up to 90 seconds. but a typical pause is 
about 10 seconds. 


Figure 5-3: Both sides of SCA board 


You see, technical people tend to talk more 
openly. at least in my experience, so that's where 
you will probably strike oil. 


Of course, you can just mail a stack of permission 
requests to every station in range, and as you 
receive replies. you'll learn which ones offer it. 


There is another resource to draw upon: the FM 
ATLAS AND STATION DIRECTORY. available 
from sources that provide ELF SCA Adapter Kits. 
It will be a great addition to your radio library if 
you are an FM-DX nut or an SCA freak. 


WHO DOES IT? 


How can you learn which FM stations offer SCA 
programming? There won't be a program list in 
your local "Entertainment Guide," that's for sure. 


You could call the stations. It's possible that only 
the station engineering and managerial teams 
know anything about SCA, so if a station 
receptionist gives you a bland reply, ask for an 
engineer or manager. Your best answer will 
generally come from an engineer, and not just 
because he knows more about the technology. 


SUCCESS! 


So, you finally have SCA bragging rights. and 
can actually pump Muzak™ into your bathroom 
just like a department store! You might also find 
some audio novels for the blind, sports and 
weather information, and a few other things that 
are even more interesting than elevator music. 


And remember... it's not that SCA 15 so 
fascinating. A scannist like you simply wants 
anything penetrating his personal ether to be 
available for monitoring. 


Just in case you're skeptical about the value of the pin-line concept, take 
a look at these extreme examples. There simply is no better, cheaper, or 


more effective way to get such things done: 


INTELLIGENCE FOR PRO-2004/5/6 
and PRO-2035 


Here's a great (and easy) mod that lets the PRO- 
2004/5/6 and PRO-2035 recognize worthless 
computer data and other single or multiple tone 
signals. After pausing on unwanted signals for a 
second or so, it resumes SCAN or SEARCH. 
Intelligent! 


This modification may resemble a Tone 
Decoder/Rejecter, but they're different circuits 
with different functions. 


The Data/Tone Squelch can serve in a limited 
capacity as a Tone Decoder/Rejecter (TDR) but it's 
designed for the broader need to discriminate 
against many forms of non-voice signals and not 
just one specific tone. 


Another difference is that the TDR will work in 
most any scanner whereas the DATA/TONE 
SQUELCH is only for the PRO-2004, PRO- 
2005, PRO-2006, and PRO-2035. 


I am seeking ways to apply it to other scanners, 
but for now, it is for only those scanners that were 
manufactured with a SOUND SQUELCH 
function. The Data/Tone Squelch will hereafter be 
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SQUELCH 


| referred to as “DSQ,” while Sound Squeich will 


be called "SSQ." 


FEWER LOCKOUTS! 


One impact of the DSQ is that you no longer must 
lock out those Trunked Data Channels when 
you're monitoring 800 MHz SMR! Those data 
channels usually change every day, which makes 
manual LockOut programming a real chore. 


A scanner equipped with my DSQ circuit won't 
Jock onto those obnoxious signals, including 
cellular data, continuous tones, DES/DVP, 
Improved Mobile Telephone Service (IMTS) 
tones, digital pagers, and most other non-voice 
signals. 


My DSQ will even discriminate against static. In 
other words, it discriminates against all but two 
kinds of signals: voice and silent (dead) carriers! 


The latter is okay. because the resident SSQ 
function takes care of silent signals. In fact, my 
DSQ works with the SSQ but is independent in 
every way except that the Sound Squelch button 
on the front panel activates/deactivates both 
functions. Two SPST switches can provide 
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separate control of SSQ and DSQ if that's 
important to you. Construcuon and installation of 
the DSQ are within the ability of most hobbyists 
who have leamed which end of the soldering iron 
to grab. 


ADVICE: You should have the Service 
Manual for your scanner before doing any 
modification. Order directly from Tandy 
National Parts Center, at (800) 442-2425. 


CONSTRUCTION 


Build the DSQ circuit on perf board that's about 
1“ X J.5" – though smaller is fine if you're good 
at micro circuits, 

Refer to Figures 6-1 through 6-6. Use an IC 
socket (Х 0-1) for 0-1, but don't plug in U-I in 
until the board has been finished and checked for 
errors. 


Don't install C-1 yet, but Keep it handy – you’]] 


see why as we go on. Note that pins 1, 6, 7, 8, 9, 


10, 11. 13, and 14 of 17-1 are unused. Snip those 
pins from XU-1 before inserting the socket into 
the board. 


Figure 6-1: Mounting an accessory board 


Pertboard holes, or 
drilled holes in PCB 


Solder here 


18-ga solid wire 
Solder here 


Attach a suff bare copper wire (#18 ga) to the 
ground trace of the board, as in Figure 6-1. 


Loop it through the holes in the perf board, pinch 
it down for rigidity and then solder it to the main 
ground trace of the DSQ. Leave about | inch of 
this bare wire free. It will simplify installation of 
the DSQ board inside the scanner. 
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WIRING & CONSTRUCTION 
Solder a RED hookup wire to pin 3 of XU- 1. 


Solder a YELLOW hookup wire to the junction of 
D-1 and D-2. 


Solder a WHITE hookup wire to the anode 
of D-4. 


Solder an ORANGE wire to the cathode of D-4. 
Solder a BLUE wire to the cathode of D-3. 


These wires should be 8-10" long, and will be 
routed and trimmed later. 


Construction and layout are not critical and can 
vary from my suggestions, which are about as 
simple as possible and involve no loops, jumpers, 
or other weird winng techniques. Make your 
board as small as practical. though, so that it 
won't take up too much space inside the scanner. 


You may be doing many modifications in the 
future, so space might become valuable. Install the 
DSQ board in an out of the way place, though 
VR-1 should be accessible for initia] adjustments. 


The bare ground wire on the DSQ board can be 
soldered to the chassis or to a printed circuit board 
ground trace, thereby making the mount much 
easier. This bare wire can be bolted to the chassis 
if you don't have a heavy duty soldering gun. 
Once soldered or bolted, this stiff wire should 
make the DSQ board relatively immobile. 


PRO-2004 ONLY: Solder the (+) leg of C-1 
directly to IC-5, pin 14. 


PRO-2005/6 ONLY: Solder the (4) leg of C-1 
directly to IC-5, pin 7. 


PRO-2035 ONLY: Solder the (+) leg of C-1 
directly to IC-6, pin 14. 


PRO-2004/5/6/2035 ALL: 
Solder the free end of the YELLOW hookup wire 
to the (—) leg of C-1. 


Solder the BARE ground wire to the chassis or a 
circuit ground in the scanner. 


Solder the free end of the RED wire at pin 3 of 


XU-1 to the OUTPUT leg of IC-8, the +5V 
regulator on the main chassis of the scanner. 


IC-8 is the same in all four scanners, PRO- 
2004/5/6 and PRO-2035. 


PRO-2004 ONLY: Locate CN-504 on the 
Logic/CPU board, PC-3, and follow its wire 
bundle back to the top of the main receiver board. 


Data Tone Squelch 


Locate the sky blue wire that connects to the main 
board at the right end of the row of wires, and 
desolder that wire from the board. 


For identification, that wire comes from pin 15 of 
CN-504. Let it hang loose until needed. 


PRO-2005/6 ONLY: 


Locate CN-3 on the main receiver board and 
follow its wire bundle up to the Logic/CPU board. 


Locate the sky blue wire that connects to pin 4 of 
CN-3. Clip that blue wire halfway between CN-3 
and the Logic/CPU board. Let the two cut ends 
hang loose for a moment. 


PRO-2035 ONLY: 


Locate CN-3 on the main receiver board and 
follow its wire bundle up to the Logic/CPU board. 


Locate the light blue wire that connects to pin 5 of 
CN-3. Clip that blue wire halfway between CN-3 
and the Logic/CPU board. Let the two cut ends 
hang loose for a moment. 


PRO-2004/5/6/2035 ALL: 


Install two SPST switches of your choosing in a 
place of your choosing on the scanner's front or 
rear panels. For rear panel installations, Radio 
Shack's micro-mini toggle switches, #275-624, 
will be just fine. 


These switches can also be put into the front 
panel. and this isn't difficult to do on the PRO- 
2004 where there is plenty of room. It is more 
difficult on the PRO-2005/6/2035 where the 
Logic/CPU board must first be removed. 


One neat choice of switch for any of the PRO- 
2004/5/6/2035 is a 4, 6, or 8 position DIP switch. 
Extra switch positions will be useful on other 
mods — they won't be wasted! 


PRO-2004/5/6/2035 ALL: 


Solder the ORANGE wire of the DSQ board to the 
bottom lug of one switch. This switch will control 
the stock SOUND SQUELCH (SSQ) function, 
ON or OFF. 


Solder the BLUE wire of the DSQ board to the 
bottom lug of the other switch. 


This switch will control the new DATA/TONE 
SQUELCH (DSQ) function, ON or OFF. 


Solder a hare jumper wire from the free lug of one 
switch to the free lug of the other switch. 
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PRO-2004 ONLY: Solder the sky blue wire 
that was removed from the main board to the bare 
jumper wire between the lugs of the two switches. 


Solder the WHITE wire of the DSQ board to the 
empty spot on the main scanner board where the 
sky blue wire was removed. This completes 
installation: Proceed to "Adjustment of VR-1.” 


PRO-2005/6/2035 ONLY: Splice the WHITE 
wire of the DSQ board to the cut sky blue wire 
that goes to CN-3 of the main scanner board. 


Splice one end of a hookup wire to the other cut 
end of the blue wire that goes to the Logic /CPU 
board in the front panel. 


Insulate the splices! Solder the other end of this 
new hookup wire to the common bare jumper wire 
between the top lugs of the two switches. 


ALL: This completes your installation: proceed to 
" Adjustment of VR- 1," next. 


ADJUSTMENT OF VR-1 
PRO-2004/5/6/2035 ALL: 


Push the front pane] SOUND SQUELCH button 
ON. Turn the SSQ OFF and the DSQ ON. Attach 
a voltmeter’s (—) to ground and its (+) to pin 5 of 
U-1. Tune the scanner to a strong and noisy data 
channel or to а loud, single tone carrier. Cellular 
or trunked data channels are ideal! 


Measure the DC voltage at pin 5 of U-1 (4.1 to 
4.5V typical). Calculate 80% of that voltage; then 
put the voltmeter at pin 4 of U-] and adjust VR-1 
for that 80% level of the above measurement. It's 
typically between 3.6 and 3.8V. 


The exact adjustment isn't critical, but if set too 
low, voice signals will resume SCAN or 
SEARCH. ff it's too high, data and tone signals 
won't trigger SCAN/SEARCH RESUME. 


Another way to find the optimum setting is to put 
a voltmeter (+) on pin 2 of U-1 and (—) to ground 
and tune the scanner to a cellular or trunked data 
channel. 


Adjust VR-1, first one way and then the other, 
and then to a point so that the voltage on pin 2 of 
0-1 just achieves a steady +5V. It takes a stable 
+5V for about one second to trigger the 
SCAN/SEARCH RESUME function, but dont 
adjust VR-1 any further than necessary to stabilize 
the DATA/TONE voltage at pin 2. 
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OPERATION & TECHNICAL NOTES 


Remember that the SOUND SQUELCH button on 
the front panel must be ON before either SSQ or 
DSQ can work. The SOUND SQUELCH button 
is kind of like a master on/off switch and the two 
SPST switches control one, the other, or both. 


Voice signals will cause the scanner to stay locked 
as normal until the signal goes away. Minor 
adjustment of VR-] may be necessary for 
optimum results, but the final setting will produce 
a voltage on pin 4 of U-1 of about 80% of the 
peak voltage on pin 5 of U- I. 


The DC input signal at pin 5 of U-1 will be nearly 
zero on silent or quiet signals and about 4-4.5 V 
with data and continuous tone signals. Pin 5 will 
show a very erratic and rapid]y changing voltage 
from nearly 0-4V or so for voice signals. 


The DC output voltage at pin 2 of 0-1 will be 
nearly 0 on silent or quiet signals, and will be a 
steady +5V with data and continuous tone signals. 
Voice signals will cause a rapid fluctuation of the 
signal between 0-5V at pin 2 of U-1. 


When the SOUND SQUELCH button is off. 
neither SOUND nor DATA SQUELCH will 
operate and scanner operation wil) be “stock.” 


IN CASE OF DIFFICULTY 


The most critical parts of this mod are the rectifier 
circuit consisting of D-1. D-2, R-1. R-2, C-1, and 
C-2, and proper pin wiring of the LM-339 chip. 
Make sure the diode polarities are correct — the 
banded end is the cathode. Make sure polarities of 
Capacitors are correct. 


Tune to a strong, obnoxious cellular (879-88 | 
MHz) or trunked data channel (851-866 MHz), 
and measure the DC voltage at pin 5 of U-l. There 
should be between 4 and 4.5 volts. You won't 
measure “too much," but not enough is possible. 
If so. check the wiring and components mentioned 
above. 


Next most critical is the polarity and wiring of the 
two isolation diodes, D-3 and D-4. Last but not 
least is the wiring of U-1. 


The circuit is so simple and affirmative in its 
action that you're not likely to encounter trouble if 
you follow these instructions. 


Some PRO-2005 (not PRO-2004 or 2006 or 
2035) may have a chirping or warbling, morse 
code type of sound on quiet channels after this 
mod has been done. If yours exhibits this weird 
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sound, change C-] from 1.0 uF to 0.1 pF, Radio 
Shack 31272-1432. 


If the "tweet" is still there, then solder a 1000 uF 
capacitor (RS 4272-1032) directly to pins 4 and 
11 of IC-5 in the scanner. 


Pin 4 should get the (4) lug of the capacitor while 
pin 11 gets the (—) lug. This is a peculiar problem 
in some PRO-2005's, but it's easy to correct if 
you encounter it. 


INTRO TO THEORIES 


To understand the simple operation of my 
DATA/TONE SQUELCH, it is first necessary to 
understand the PRO-2004/5/6s SOUND 
SQUELCH (SSQ) circuit on which we will 
"piggy back" the new DSQ circuit. 


The circuits are identical among the PRO-2004/5/6 
scanners but circuit symbols differ. I use a simple 
scheme for this discussion. P4 means PRO-2004, 
P5/6 means PRO-2005 and PRO-2006, P35 
means PRO-2035, and P* means ALL. 


THEORY OF OPERATION OF THE 
SOUND SQUELCH 


А weak portion of the receiver's audio is sampled 
at the detector and amplified through IC-5 (P*). 


The highly amplified audio is fed from ICS (P4, 
pin 14; PS/6, pin 7; P35, IC6, pin 14) to a 
rectifier network (P4, D-4| and D-42; P5/6, 
D-43 and D-44; P35; dual diode D-41). 


This rectifier network converts audio signals to а 
DC level proportional to the leve] of the audio 
signal, and is used as a bias to a switching 
transistor (P4, Q-21; P5/6, Q-19; P35, Q21). 
Most audio signals are strong enough to turn the 
transistor on while very weak or silent signals 
keep it off. 


When the transistor is off, SV is on its collector, 
but when the transistor is ON, the collector drops 
to nearly O volts. 5V and OV forms the logic 
differential required by the CPU for making 
decisions. 


The collector of the transistor is fed directly to the 
CPU (P4, 1C-503, pin 24; P5/6, IC-501. pin 18; 
P35, IC-501, pin 34). When the SOUND 
SQUELCH button on the front panel is set to the 
ON position and when CPU's SSQ pin is at OV, 
the scanner SCANs or SEARCHes as normal, 
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locking on any signals that break the squelch. 
Similarly, when the SOUND SQUELCH button is 
off, the CPU's SSQ pin goes to ground, which 
keeps it at zero volts. no matter what. 


When the SOUND SQUELCH button is on, and 
when the scanner encounters a silent or 
unmodulated carrier, then the transistor discussed 
above gets turned off and a SV Jevel on its 
collector 1s fed to the CPU's SSQ pin. 5V on the 
CPU's SSQ pin makes the scanner resume 
scanning within a second or so after stopping. 


As long as there are voices or other audio signals 
present, the CPU's SSQ pin will be “OV low" and 
operation is normal. When that pin goes “+5V 
high," the CPU is programmed to resume 
scanning or searching. 


THEORY OF OPERATION OF THE 
DATA/TONE SQUELCH 


Since the CPU's SSQ pin responds only to low 
and high logic and really doesn't know the 
difference between voice and data, we can 
generate a separate but opposite logic circuit to 
make it discriminate against tones and dara in the 
same way the SSO discriminates against silent 
carriers. 


All we need is a circuit that sends a “high” to the 
CPU's SSQ pin іл the presence of strong. 
sustained audio signals such as data or continuous 
tones. Му DSQ does this niceiv, thank you. since 
voice signals are erratic, varying, and not at all 
like data or continuous tones. С- 1 of our circuit 
samples the same audio as the SSQ but passes it to 
a new rectifier circuit, D-1 and D-2, which with 
R-1, R-2, and C-2, creates a DC signal 
proportional to the level of the audio signal. 


This DC signal is fed to pin 5 of U-1, a Voltage 
Comparator IC. The reference voltage is adjusted 
by VR-1, and fed to pin 4 of U-!. 


As long as the DC signal at pin 5 is less than the 
reference signal at pin 4, the output of U-] at pin 2 
will be zero volts "low." When the DC signal at 
pin 5 exceeds the reference voltage at pin 4, the 
output of U-). pin 2, wi!) go “high” to 45V. 


The output of U-), pin 2, is coupled to the CPU 
via isolation diode D-3. A "high" tells the CPU to 
make the scanner resume SCANning or 
SEARCHing while а “low” does nothing out of 
the ordinary. 


When VR- 1 is correctly adjusted, the output of U- 
l, pin 2, wil) never go "high" long enough to 
trigger the CPU unless data or continuous tones 
are present. Strong voice signals may make U-I's 
output go high momentarily. but the interval will 
not be long enough to trigger the CPU unless the 
talker does an extended "Ahhhhh" into the mike, 
because about 0.5 to 1 second is required before 
the CPU wil! trigger. 


Most voice signals of interest will not send a 
lengthy "high" to the CPU, but continuous tones 
and data will! Therefore. my DATA/TONE 
SQUELCH works iike. though opposite to. 
SOUND SQUELCH. 


{solation diodes D-3 and D-3, allow the SOUND 
SQUELCH and the DATA/TONE SQUELCH to 
work simultaneously or either at à time, and not 
interfere with each other. 


Depending on the setting of the individual DSQ 
and SSQ switches. the scanner wil] resume 
SCANning or SEARCHing when it encounters 
data/tone signals, and silent carriers will not be 
affected by voice signals! 
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Table 6-1: Parts list for DSQ circuit 


CKT | RADIO 
SYM DESCRIPTION SHACK # 
C-1 1ЕЛЗ5\/ tantalum.. аа онь аА 8272-1434 
C-2 2.2uF/35V tantalum......... Age up ux dade do 
214 134148 ог 13914 switching 010825 .............. #276-1*22 
R-Í 300-ohm ........ D ано ийт ОП 
R-2 12k: use 10к and 2.2K in series if need де x 

R-3 3.3K ohms ..,....... ШУЛА УОК УЛ #274-1328 
U-í LM-339 СО Вага Ога acus eee rebels 8276-1712 
VR-À е ао ere soo Лы Сыз ias #271-2ё2 
XU-1 :C socket, 14-917 DIP, 15: 1-1 ароме .......... #276-129: 
Misc PET ООА: e uum. blat le дайыны Net 1276-1395 
Misc сокир wire; 8276-776 or 8278-775 best > 
512 switch. SPST toggle switch .................. ‚#275-624 


* Not availabie at Radio Snack 


Figure 6-3: 050 perfooard, componen: | Figure 6-4: DSQ perfboard, solder side 
side 


|D-3; 
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Figure 6-5: DSQ schematic 
SCANNER CIRCUITRY <5 BUILD THIS CIRCUIT ~-=- == —— E 
+5у Reg 
OUT Lead Red +5v 
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ron 


PRO-2004: IC-5, Pin] 4 


PRO-2005/6: 1C-5, Pin 7 <—+ 
PRO-2035: IC-6, Pin 14 ! 


Sconner | 
Ground 
(All) | 


PRO-2004: G-21 
PRO-2005/6: Q-19 
PRO-2035: Q-21 


i , PRO-2004: CN-504, Pin 15 
! ^, PRO-2005/6: CN-3, Pin 4 
mr d ‘PRO-2035: CN-3, Pin 5 


VR-I 
(3.6v typ) 


See text for 
adjustment of 
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i { NOTES: ; 

Е à 1. &-2 seems best ot about 12-&. А 10-k and o 2.2-k in senes work fine. 

© $ 2 This point is o rectified ond filtered DC, proportional to AC input from С-1. 

SOUND | — Voice signals produce an erratic, varying OC unlike the steady 4 + volis 

produced by data and continuous tone signols A voltmeter will prove this out. 


SQUELCH. 


| 3. С.І should be soldered directly іо 1C-5. Use o yellow hookup wire to the DSQ. | 
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Figure 6-6: 


PCB details 


DSQ installation – A 
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MORE INSTALLATION NOTES 


Figures 6-6 and 6-7 show a DSQ installation in a 
PRO-2006. The DSQ board is mounted above IC- 
8. Q-32, and just forward of Т-801. 


The suff ground wire of the DSQ board ts bent 
straight up from the board, looped over the top of 
the chassis side wall, and then soldered to the side 
for a solid mount and a good ground. 


The bottom of the DSQ board can be covered with 
à layer of hot glue or even a few pointy dots of 
silicone rubber sealant to protect it from shorting 
against anything below in cuse it gets shoved 
downward. 


lt will ordinarily remain in position just fine if #18 
gauge ground wire is used for the mount. +5V 
power can be taken from the OUT lug of IC-8, 
just below the DSQ board. 


The blue, orange, and white wires can be bundled 
and routed along a convenient path to their 
respective destinations. Wire length is not critical. 


ciue 


common sense." 


аве common information 


Cheek”: The Ultimate Scanner 


The DSQ and SSQ switches are installed on the 
rear pane} of the scanner. Any SPST type of 
switch will do. Just install them where convenient 
and out of the way. C- 1 should be installed at (C- 
5 and a yellow hookup wire looped around and 
routed back to the DSQ board. 


REALLY SMART! 


Once installed, this accessory adds intelligence, 
allowing the unit to do its own signal selection. 
That makes scanning more interesting because a 
higher percentage of audio will be meaningful. 


Oh, yes... 


There's another little point under the category of 
“intelligence”: operator brainpower. Before 


screaming at me that this "easy" mod doesn’. 
work, even after you've checked everything 
eleven umes, take another look at the SOUND 
SQUELCH button on the front panel. If its not 
ON, neither SSQ nor DSQ can work. 


CELLUL 


THE MOST POPULAR MOD OF ALL... 


Restoring or adding cellular band coverage is the 
scanner hack almost everyone wants. People who 
do it are the target of government, manufacturers, 
cellular telephone users, the cellular telephone 
industry, and other agencies and people who 
really should know better. 


Despite them, I believe it's Jegal to modify your 
scanner to receive cellular, so long as you never 
resell jt. I said "legal to modify your scanner," but 
I did not say that it's legal to use it for that 
purpose. This is another situation where it’s legal 
to own something as long as iUs never used. 


THE LAW 


There are laws pertaining to the reception of 
cellular signals and to the sale of cellular-capable 
receivers. Do NOT take my word for what's legal 
and what's not. Everything I say about this topic 
came from oihers just as unqualified as I am. If 
you're willing to risk your freedom based on 
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"high rumor” information, go ahead. But don't 
blame the result on me. 


It's your responsibility to investigate these laws, 
or consult with an attorney, and you should be 
wamed that some such legislation is Federal, and 
some varies from state to state. As of this writing, 
you probably can legally restore any blocked 
cellular coverage in your scanner. If you listen to 
cellular calls, however, you are violating the 
Electronic Communications Privacy Act of 1986 
(Federal), plus any applicable state or local law. 


The Telephone Disclosure and Dispute Resolution 
Act of 1994, Public Law 102-556, forbids the 
importation and manufacture of cellular-capable 
receivers, and became effective April 1, 1994. 
That Act did not forbid the sale of existing 
supplies of such scanners, nor did it address the 
cellular modifiable scanners already sold. It does 
not seem to address the action of modifying 
scanners, but it clearly stipulates that to be 
certified (hence salable), receivers may not be 
easily modified to support cellular reception. 
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MANUFACTURERS’ RESPONSE 


The manufacturers played it safe. and virtually all 
interpreted "easily modified" as “impossible.” If 
cellular is important to you, forget any receivers 
legally brought into the USA, or made here. after 
April 1, 1994. 


Just one more reason why April Fool’s Day is 
aptly named... 


AMATEUR RECEIVERS 


In this discussion, I’ ve avoided the "sorta-partly 
capable" receiver sections of a variety of handheld 
transceivers. 


One example will do for all: the original Alinco 
DJ-580T, of about 1993. It's absolutely nor a 
scanner, but it scans. The design permits the 
owner to easily find and clip a single blue wire, 
which restores coverage of the cellular band. 


Many similar products, aimed at the amateur radio 
market, were as easily "modified." 


CELLULAR-CAPABLE RECEIVERS 


А number of scanners were originally built with 
800MHz coverage, and require no modification to 
receive cellular. Some such receivers, available 
only on the used market, are listed below: 


ЈЛЛ. SX-400 AOR-950 
Regency MX-4000 AOR-1000 
Regency MX-5000 AOR-1500 
Uniden BC-800XLT AOR-2500 
ICOM R-7100 AOR-3000 
ICOM R-7000 Yaesu FRG-9600 
ICOM К-1 ICOM R-9000 
ICOM R-100 Kenwood RZ-1 


Yupiteru MVT-series 


THE PRO-2004 STORY 


The PRO-2004 is absent from the above list. 
because just as it was introduced in late 1986, 
most units were recalled from the distribution 
system, presumably to regional service centers for 
addition of the cellular blocking diode. Clearly, 
this was a last minute retrofit effort, because the 
first wave of PRO-2004's to hit the stores had the 
anti-cellular diode hand-soldered to the bottom 
side of the Logic/CPU board. Later productions 


had this diode machine-soldered into its proper 
spots on the top side of the board. 


Several PRO-2004's, however, hit the streets in 
August and September of 1986, fully cellular- 
capable. Most were caught and "fixed" before 
sale, though. 


Here's a bet you can win. If anyone ever claims 
that Radio Shack never sold a scanner that could 
receive cellular telephone calls, just lay their 
eyeballs on page 89 of their 1987 Catalog (No. 
406) where the 2004 specs clearly state: 


"Continuous tuning from 25-520M Hz and 
760-] 300M Hz." 


The PRO-2004 was designed and built to be 
cellular-capable, and a few hit the street as such. 
Most, however. wete retrofitted prior to sale and a 
green addendum sheet to the instructions was 
included. Yes, I have a copy of that, also. 


CELLULAR-MODIFIABLE SCANNERS 


The following ts a list of scanners believed to be 
cellular modifiable because 800MHz circuitry was 
blocked at the factory, during production, and that 
blockage can be reversed. 


PRO-2004 BC-855XLT ? 
PRO-2005 BC-200XLT 
PRO-2006 BC-205XLT 
PRO-2022 BC-760XLT * 
PRO-2026 BC-700XLTA * 
PRO-2027 BC-890XLT * 
PRO-2030 BC-950XLT 
PRO-2032 BC-2500XLT ° 
PRO-34 Regency 4030 
PRO-37 Regency 1600 
PRO-39 PRO-43 ! 
PRO-46 ? PRO-SI! 
PRO-23? 
Note 1: Date of mfg code 1A4, 2A4, xA3, x A2 


(label in battery compartment), or no letter "A" in 
the serial number. 


Note 2: Date of mfg code | A4. 2A4, -АЗ. -A2 
(label on back). 

Nore 3: Date of mfg code must not end in the 
letter D, except for OAID. 


Note 4: Date of mfg code must not end in the 
letter D. 
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Please check the footnotes, because some of these 
mode] numbers were imported er manufactured 
after the cutoff date. and therefore werc built as 
“impossible to modify. Thus. some PRO-43's 
аге modifiahle and «ome are not. and that's irue of 
several of these products. 


For instance, PRO-43' s imported before March, 
1994. are modifiable. o some Dipsga Li 


during March. and аб chereniter, are im] to 
modify. Duie codes of any AT oi ЈАЗ ba 
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THE BIRTH OF THE CELLUAAS 
CRAZE 


SARS Si ФУД 


эб 4 a . | c tres je YT 


Oner imanuracqurezs tonuwed Radio Sha 
and deliberately biocked cellular coveraee m hem 
scanners. In most cases. tie “undo” is as casy as 
pie, thereby proving that the manufacturers’ intent 
was to be able to say they did not offer celiular- 
capable scanners. It worked for seven years. 


ZK'S3eào 


The cellular industry went on deceiving their 
customers, promising privacy and security of 
communications. Government wasn't interested 
after it had washed its hands with the ECPA of 
1986. And, manufacturers were delighted that 
they could burn both ends of the candle. (Peddling 
“private” cellular telephones and scanners capable 
of breaking that privacy!) Everybody was happy 
until the scanner market boomed and became 
something of a Page Two headline. 


THE CTIA 


Then the secret was out: cellular telephones really 
were not private after all. An outcry from the 
cellular user community coupled with a powerful 
lobby by the cellular industry managed to push 
through today's law that eliminates cellular- 
capable receivers, period. 
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The Cellular Telephone Indusiry Association 
(CTIA) and its members told prospective cellular 
те:ерһопе users not to worry: “those scanners are 
being made Шера! ` They were right... 


Congress meekly followed its instructions, and 
the result was the ead of celtular-capable Scanner 
Duo non/importation, plus penalties for those 
who “ster. 


RATIONALIZATION OR NATURAL 
LAW? 


Radio wove s do net wr tO Mans dae 
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mp gat Io chain pha To сема ass 
they aad io deveiop a technolog thai makes tt 
(close to) impossiaic, Or at least very expensive io 
intercept those transmissions. Or, it could cave in 
to the pressure from the big-raoney people, once 
again, and put the burden on the consumer. 


A closing point, before we move on.....this 
business of secrecy and privacy seems weird to 
me. There are no laws to interfere with someone 
listening to your conversations over a table at a 
restaurant, or on a bus. train, plane, or anywhere 
out in public. And there's no Federal restriction 
against listening to cordless phones and baby 
monitors, which is really a whole new class of 
eavesdropping. Why cellular? 


It's a lot like guns... when they re outlawed, only 
criminals and despots will have them. Someday, 
only those with sinister intent will be able to 
monitor your cellular conversations, and they will 
do it easily. If that doesn't seem possible to you, 
think of the now-infamous "Clipper Chip." 


Restricted access to the airwaves is not the answer 
to security and privacy, but when laws are passed 
that pretend to do this — look out, Bunky! You 
better watch over your shoulder when someone 
wants to protect you... or your privacy. 
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ON WITH. CELLULAR SCANNERS 


Just ahead is a quick and dirty guide to the 
liberation of cellular capability in the scanners on 
the “list.” Since this information has already been 
published to one extent or another elsewhere, I 
have skipped some of the gory details. 


You really should have the service manual for 
your scanner anyway (I insist on it), so cut that 
diode, or add that resistor, and be done with it. 


Just don’t LISTEN to cellular signals, okay? 


CELLULAR COMMUNICATION 


Since my first two books were written, the ce!lular 
frequency allocations have grown a little. The 
initial base allocations were 870-890M Hz. but 
now are as follows: 


System A (Common Carrier — non Telco) 
879.390 - 879.990 

869.040 - 879.990 

890.010 - 891.480 
System B (Wireline - Telco) 

880.020 - 880.620 

880.020 - 889.980 

891.510 - 893.970 


Note: Cellular mobiles are exactly 4SMHz below 
the base frequencies. 


Base Control 
Base Voice ] 
Base Voice 2 


Base Control 
Base Voice 1 
Base Voice 2 


Coming up in Figure 7-2 are the new cell site 
frequency plans for your reference (and use, if 
current anti-monitoring laws are ever repealed). 
Thanks to Bob Gehri of the US Scanner News for 
sharing this new plan with all of us. Those who 
are computer spreadsheet aficionados can easily 
create your own reference document. 


Otherwise, I have no objections if you want to 
copy those two pages by whatever means, and 
paste up the bottom charts alongside the top ones, 
to make one reference sheet for each cellular 
Service provider. 


While you're at it, you may as well make up some 
blank sheets for notes to authenticate the charts 
I'm giving you. 


ANALOG VS. DIGITAL 
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(CDMA and TDMA) will be of use only in those 
markets where congestion is a problem, because 
those technologies increase efficiency of the band, 
permitting more users perMHz than analog FM. 


Апа even where it's tough to get a channel (New 
York City, Chicago, Los Angeles, etc.), there 
must be analog cellular as well. What use is a 
phone that works ONLY within a few miles of a 
downtown office area? That's why GE, Nokia, 
etc. call their newest products “dual-mode.” 


Technically, CDMA (Qualcomm) апа TDMA 
(almost everyone else) are “encrypted.” Current 
legislation makes it illegal to crack such signals, 
so if you were to intercept a digital cellular call, 
and decode it, you'd get two demerits instead of 
one. 


CHANNEL ALLOCATIONS 


It now appears that 20 or 21 frequencies are 
assigned to each of 21 cell sites. They're really 
circular (with overlap), but it helps to understand 
if you consider each cefl a hexagon (Figure 7-1). 


This creates a scheme with a minimum of two cell 
radii between any two cells share a frequency. 


Figure 7-1: Cell configuration 


О 


Spares? 
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Call it two buffer zones, if you like. In my first 
book, I suggested a seven-cell arrangement, like 
A-G, which offered a 1-cell buffer between any 
two identical cells. In retrospect, a 1-cell buffer is 
probably not enough under many conditions 
where radio signals are free to travel without 
hitting obstacles. 


Thus, a 2-cell buffer is more logical and practical. 
If this 1s the case, then 19 equally arranged cells 
can be laid out to assure the minimum 2-cell 
buffering. This leaves what I would call two 
"spare" cells that can be brought into play for 
emergencies or for difficult situations where 2-cell 
buffers are not quite good enough. 


Now please understand that for two reasons this is 
conjecture on my part: one, cellular companies do 
not casually release this kind of information, and 
two, I don't listen to cellular. As a radio engineer, 
I can suggest this is pretty close to the money, but 
that each metro region will surely have a different 
cellular implementation. 


Also bear in mind that cells can be reduced in 
physical size when transmitter power is reduced. 
Cell sites can control transmit (Tx) power from the 
mobiles, so just about any concept is possible, 
and I’m sure there are hundreds of different 
implementations in use around the world. The 
plan shown here is so flexible that it can serve 
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highly congested metropolitan regions as well as 
remote rural areas. If you are interested in 
mapping the cellular implementation for your 
region, then this information may help get you off 
on the right foot. 


There are several books on the subject, if it 
fascinates you. 


MAPPING YOUR: AREA 


If you are interested in this sort of activity, then 
you'll need a good S-meter with which to measure 
and assess relative signal strengths. You'll not be 
able to tell one се]! site from another without one. 
Even with an S-meter, your work 15 cut out for 
you. There will be boatloads of data to gather, 
organize and process. It can be fun, though. Just 
remember that intercepting cellular signals is 
probably against the law, so proceed only at your 
own risk. I cannot accept responsibility for your 
choices. 


Next comes the charts for typical cellular 
implementations, as Figures 7-2 and 7-3. 
Remember, by law, each community is served by 
two cellular providers, one definitely NOT a 
telephone company. After the charts, we get into 
the hard core of hacking those scanners to liberate 
the deliberately blocked cellular coverage. 


The Ultimate Scanner 


Cheek? 
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| frequency plan for cell sites — Systems “А” and “В” 


Typica 


Figure 7-2 
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Tutorial photographs... 


1. Mis-hack. Note the damage to the pins and traces, 


Don't make work for yourself (or for me!): be careful, take 
your time, use the right soldering iron, and remember how 
fragile some of these parts and boards can be. 


2. Re-hack. Note the repaired pins and traces. Now it's a 25,600 channel 
memory block that works! 


Li LJ „те 
8 odd еу ү, 
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ENHANCING FUNCTIONALITY... 
Well, here we go. 


I'm about to show you the tools and give you the 
know-how to stretch the capability of your 
scanner. If it's a candidate for The Ultimate 
Scanner, and you've already done the previous 
enhancements, this chapter will help you get lots 
closer to that goal, though your result will 
probably smell better than mine. 


We're now moving into the trunked and cellular 
regions of the spectrum. PLEASE do not use your 
scanner for illegal purposes. For instance, DO 
NOT use it for cellular monitoring in the United 
States. On the other hand, owning a scanner with 
blocked cellular is like driving a Corvette with a 
55 МРН governor. 


Remember my warnings? Be patient. Get 
the service manual, Read the instructions. 
Read them again. Have a plan, so you 
don’t add hardware in a space you'll need 
for somerhing else. Double-check your 
work. Check it one more time. 


PRO-2004 — Possibly the best 
scanner of all time (1986-1989) 


Cellular: Clip or remove D-513. 105 usually 
located on the top of the Logic/CPU board in the 
metal compartment. but early units nave D-513 all 
by itself on the bottom (solder-side) of the board. 


Note: The following add-a-diode modifications 
will require you to be a little intuitive with respect 
to where the new diodes are to be installed. The 
empty spots are not marked, but you can easily 
figure them out by first identifying those spots that 
are marked. 


It's as simple as a 2nd grade number pu22le: 
34  98e6 7 
Question: what numbers go in the blank spots? 


Easy Speedup: Add а 1N4148 diode to the 
emptv spots for D-514. Gives a no-compromise 
25% speedup of the SCAN mode. Polarity 
complies with that of other diodes in this row. 


Extra 100 Channels: The PRO-2004 came 
with 300 channels, and another 100 are free for 
the taking by adding a 1N4148 diode to the empty 
spot for D-510. The result is 10 Scan Banks with 
40 channels per bank, just like the PRO-2005/6. 
There are no side-effects to this mod. 


CPU Upgrade: Not easy. but “do-able.” Early 
production runs of the PRO-2004 came with a 
CPU with a part number of GRE-0327. Later 
production runs use a GRE-0327A. The only 
difference between them is the default cellular 
search increment of 30kHz (later). 


In early units, the 30kHz step covers the old 
cellular atlocauion, 870-890MHz and 825- 
845MHZ, outside of which the default step is 
I2.5k Hz! Later units step at 30kHz over 868.970- 
894.000MHz and 823.970-849.000MHz, the new 
cellular allocations that were implemented in the 
middle of the 2004's production run. If you have 
ап older 2004, you can remove the GRE-0327 
CPU and replace it with a new GRE-0327A. 


The chip is the large 64-pin DIP style and can be 
removed fairly easilv. Before installing the new 
one, I suggest installing either a 64-pin DIP socket 
or two 32-pin strips of pin-line sackets, 


Warning: Clipping D-511 or adding something 
anywhere else will either accomplish nothing at 
all. or will degrade the performance of your 
scanner. Don t believe everything you hear... 


PRO.2005 — Good candidate for the 
Ultimate Scanner (1990) 


A marginally-evolved PRO-2004 with an inferior 
case and keyboard. but easily modified: 


Cellular: Remove top cover. Immediately behind 
the #3 key on the keyboard are two diodes 
standing on end. Clip the exposed leg of D-502 
and spread the cut ends slightly. Do NOT clip 
D-503! 


Easy Speedup: Add a (N4148 diode to the 
empty spots for D-501. Gives а no-compromise 
25% speedup of the SCAN mode. Comply with 
polarity of other diodes in this row. 


CPU Upgrade? You can replace the existing 
CPU and clock resonator, CX-501. with PRO- 
2006 parts, and clip BOTH diodes behind the #3 
key. Be forewarned. however, this is one "hairy" 
job and not for the inexperienced or the faint-of- 
heart. I have done it several times, but won't do it 
again for either love or money. 


This, and a couple of other changes can turn a 
PRO-2005 into a PRO-2006, though. Study the 
schematics of both service manuals if you're 
interested in tackling the job. 
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PRO-2006 — Outstanding starting 
point for the Ultimate Scanner 
(1991-1994) 


A substantially evolved PRO-2004 with an 
inferior case and keyboard, but easily modified. 
For years, this was the most popular and most 
hacked high-performance scanner in the hobby. 


The PRO-2006 does have some electronic 
advantages over the PRO-2004 and PRO-2005. 
but the designs remain functionally the same. 


Cellular: Remove the top cover. Immediately 
behind the #3 key on the keyboard are two diodes 
standing on end. Clip the exposed leg of D-502 
and spread the cut ends slightly. 


Easy speedup: Clip the exposed leg of the 
remaining diode. D-503. and spread the cut ends 
slighty. Gives a no-compromise 25% speedup of 
the SCAN mode. 


Warning: Adding D-50i or D-504 diodes will 
either accomplish nothing at all. or will degrade 
the performance of the scanner. Don't believe 
everything you hear... 


PRO-34 — An old workhorse 
handheld scanner, antiquated now, 
but still useful 


Cellular: Spot welds. as cautioned in my last 
book, are really noi a problem. All circuit boards 
and subassemblies are held in place by screws. 
Work vour way to the bottom layer (Logic/CPU 
board) and chip an exposed lead of D- 11. 


Speedup: Not "easy" bui this is the time to do it. 
if vou must. Replace СХ- with a 3.57/MHz TV 
Colorburst quartz crystal, The case of the crystal 
»hou'd be wired to the middle hole o£ CX-1 
(ground). 

Warning: Clipping or adding any other diodes 
will accomplish either nothing at all, or will 
degrade the performance of vour scanner. Don't 
believe everything you hear... 


PRO-37— An evolved PRO-34, quickly 
replaced by the PRO-43 


It's much the same design as the PRO-34; with 
some improvements and circuit syinbol changes. 


Cellular: Same instructions as for the PRO-34 
above. except clip an exposed leg of D-13. 
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PRO-39 — A scaled down PRO-43 
(Yawn.....) 


Cellular: Once you get down to the Logic/CPU 
board, desolder the four legs of the rectangular 
metal shield on the Logic/CPU board to access the 
celular diode. 


Desocider and remove diode D-6. 


PRO-43 — Best handheld scanner for 
the money (and that might be three 
too many words) 


| The celluiar and 54-88MHz procedures work only 


with Date Codes of 2А4. 1A4, ХАЛ, and x A2. It 
probably will not work with 3A4 and definitely 
not with 4A4 and up. nor if there is ап "A" in the 
serial number. 


Cellular: Once you get down to the Logic/CPU 
board. desolder the four legs ot the rectangular 
metal shield on the Logic/CPU board to access the 
cellular diode. Carefullv desolder diode D-4 and 
lày it aside for the next step. 


54-88MHz Restoration: The original D-4 
diode (vou removed to liberate cellular) is soldered 
into the empty spots for D-3. retaining the same 
polarity orientation. This restores 54-88 Hz which 
ordinarily would not be worthwhile. except for the 
interesting Utility Band at 72-76MHz. 


The rest of this spectrum is for VHF-Lo TV 
channels 2-6 and generally worthless. That Ute 
band can бе hotter than a $2 pistol at times. 
though. A worthwhile mod. no side effects, when 
vou re doing the cellular any wav. 


Audio Improvement: The standard speaker of 
the PRO-43 produces terrible audio. It can be 
improved. 


First, you can replace the speaker with a better one 
from Tandy National Parts (800) 442-2425, Ask 
for the new 500 mW replacement speaker. They 
probably won't have the old one. but make sure. 


Next, there is another reasonable approach to 
improved audio in the PRO-43, considering the 
mushy sounds that come out of the stock unit. 
First, understand that power in the audjo spectrum 
is largely contained in the bass end of the band 
while intelligibility is contained in the treble end. 


More treble means less power required to convey 
understandable audio. With this in mind, remove 
C34]. a tiny 0.015uF surface mount capacitor 


located on the bottom (solder side) of the AF 
(middle) board - See Figure 7-4. Flip the AF 
board so that vou view it with the controls pointed 
up. Examine the PCB below the BNC connector: 
find a white, 2-pin temale connector. CN-303. 


To the right of CN-303 are six tiny components, 
three left to right and below them, three, top to 
bottom. The first two components of this top-to- 
bottom row are brown, unmarked chip capacitors 
while the third component is a black chip resistor 
marked "333". The middle component, the one 
just above the "333" resistor 15 C-341. 


Figure 7-4: Audio modification — PRO-43 
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| Make sure you've got it identified: C-341 is 


exactly 10 mm to the right of the left edge of the 
AF board. and exactly [3 mm down from the top 
edge of the AF board. Another positive proof is 
that C-341 is positioned directly between pins 4 
and 5 of the LM-386N-] chip which can be seen 
from the top side of the board. C-341 is slightly 
above a straight line drawn between pins 4 and 5 
of the LM-386 while the "333" resistor is further 
below that line and closer to being between pins 3 
and 6 of the LM-386. 


Now you've got it! Use solder wick to absorb the 
solder from each end of C-341 and then pop it off 
by heating one end while exerting a mild pressure 
against C-341 with the tip of a tiny screwdriver. 


S-Meter: Here's an easy S-meter for the 
PRO-43! The right circuit doesn't exist in most 
scanners to support an effective S-meter: but the 
PRO-43 has it – but there's also a lack of “real 
estate." 

That's also okay: we can work around it! 

The key S-meter point in the circuit is the cathode 
of D-302 Jocated on the bottom (solder side) of the 
AF board (middle board). D-302 is a tiny gray 
chip diode located near the forward, outboard 


corner of T-302. D-302's cathode connects to one 
Jug of T-302, and that's the spot you need to find. 


Figure 7-5 will guide you. 


Figure 7-5: Audio improvement and S-meter wiring – PRO-43 


-METE 


Route wire 
over thi$ Cornet 


Wire from 0-302 


N Caihode to C-1 in next Figure 
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Solder hookup wire to the cathode of D-302 and 
route it to the topside of the AF board to feed the 
S-mcter circuit in Figure 7-6. This wire ought not 
to be more than a couple of inches, 


Route it forward and around the notch in the 
nearest corner of the circuit board next to the 
Volume Contro), so that the wire protrudes into 
the "more spacious" component side of the board. 
Connect this wire to a lead of C-1, a 0.01 uF 
ceramic disk capacitor. Solder the anode of D-1 to 


Figure 7-6: S-meter circuit 


a handy nearby ground (/ selected pin 7 of 1C-302 
for my ground). Solder the free lead of C-1 to the 
cathode of our D-1. 


Solder the anode of our D-2 to the junction of our 
C-! and D-1. Finally. solder our R-1 and C-2 
between the cathode of our D-2 and ground as 
shown. 


Connect a wire to the junction of our D-2, R1. and 
C-2 for output to an S-meter of vour choice. 


Build this circuit inside the PRO-43 


From Cathode 
of 0-302 


There won't be nearly enough room to actually 
install an S-Meter inside the PRO-43, so this wire 
and a ground wire must somehow exit the scanner 
to connect to an external meter. Exactly how you 
do that I will leave up to you, out 1 installed a 
miniature 3/32" phone jack in the right side of the 
metal frame wall just above and between IC-301 
and D-301. 


І used a precision scale to mark off precise points 
of location so that a 5/16" hole neatly drilled 
through the right side of the rear plastic case 
matches perfectly over the 3/32" phone jack. A 
standard 3/32" phone plug inserts into this Jack Tor 
quick and easy connection of an external S- Meter. 


To Plug 
Below 


LED S-METER 


You can also build the 10-segment LED S-Meter 
as shown in Vol-2. After vour chosen S-Meter is 
connected and halfway working. operate the PRO- 
43 near a known strong transmitter, perhaps а 
ham transmitter, a police cruiser, your favorite 
security guard's handhe!d. or right next to a 
cordless telephone. or anything else known to 
transmit a strong signal. 


'Tune the scanner to that frequency. and adjust the 
4.7k trim pot so the meter reads exactly full scale. 
Other signals will read proportionally lower to 
yieid “relative signal strength” measurements! 
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PRO-23, 46, and 51 — Mot exciting, 
but not turnips, either! 


These scanners cannot be hardware modified to 
receive cellular signals. but there is a keyboard 
programming technique that wil] permit such 
recepuon in a round-about way. 


This technique works ONLY on those scanners 
sold before April of 1994, because Radio Shack 
got onto the workaround like flies on cow-pies 
and re-engineered the units to make any cellular 
reception impossible. Credit to Brian Peterson, 
Covina, CA, and Monitoring Times for the 
substance of this information. 


1. With the radio turned off, press and hold the 2, 
9, and LOCKOUT keys: turn the radio on and 
release the keys. 


Russian Roulette: This may "toast" your stored 
frequencies. If your luck is bad, you'll. have to 
reprogram them later. 


2, Step to channel 23 on the PRO-51 or channel 
15 on the PRO-23 to display 888.960MHz, a 
factory test frequency. 


3. Press either the UP or DOWN search arrow to 
scan the cellular band in proper 30kHz steps. You 
can temporarily store up to ten active cellular 
frequencies by pressing MONITOR. 


Permanently store these frequencies for scanning 
and searching: 


1. STEP to the desired MONITOR channel and 
press PROGRAM, followed by the desired 
memory channel number (including those with 
factory-preprogrammed test frequencies). 


2. Press in sequence PROGRAM. MONITOR, 
ENTER. Repeat steps | and 2 for each channel to 
go into memory. 


There are Itmitauons. If you are doing an 
Up/Down scan, and the scanning process takes 
you outside of the iocked-out 800MHz frequency 
range, vou can NOT get back into it by reversing 
the scan direction. 


In other words, if you are scanning down and go 
past 869MHz, pressing UP (to reverse the scan) 
will stmply cause the scanner to jump from 
869MHz to 896MHz. All that you have to do in 
order to get back into the locked out range. is go 
back to the manual mode, select channel 23, and 
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start your Up/Down scan again from there. This is 
the biggest frusisation in the trick. 


However, let's say that you don't want that 
888.9600 frequency on channel 23, and instead 
you want tt at channel 100. Easy ... 


1. Press MANUAL, 23. MANUAL. 


2. Turn squelch ALL the way off, so you hear 
white noise. 


3. Press either UP or DOWN search key (doesn't 
matter). 


4. Press MONITOR, then MANUAL. 
5. Press MANUAL, <ch#>, MANUAL. 


In this case, <ch#> is the channel number on 
which you want to store the 888.9600 frequency. 
For example, if you wanted to store it on channel 
100, you'd press MAN, 100, MAN. 


6. Press PROGRAM, «mon», ENTER. 


Where you see «mon», you should at this point 
press the MONITOR key as many times as it takes 
to find the monitor entry to where the 888.9600 
frequency was transferred (1-10). 


So if the frequency was transferred to monitor 
channel #3, you'd keep pressing monitor until you 
got TO mon-channel #3 and THEN you'd press 
ENTER. 


The 888.9600 frequency has now been copied to 
the new channel that you selected. АЛ of this 
rigamarole is needed since obviousiy, without the 
hardware mod vou can't manually program cel] 
frequencies. 


These instructions works just fine for getting 
access to the 66-88MHz range too! After pressing 
2, 9, LockOut, and turning your scanner on. 
channels 14, 15, and 16 wil] have frequencies 
stored in them that are between 66-88MHz range. 
These can be manipulated in the same manner as 
the 800MHz frequencies. 


PRO-2032 — A passable unit: no 
turnip, but no cigar! 


Cellular Restoration: Turn the PRO-2032 
upside down and face its rear. Desolder and 
remove the microprocessor shield at the upper left, 
close to the volume and squelch controls. 


Cellular Mode & Other Wizardry 


143 


Figure 7-7: PRO-2032 cellular restoration 
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Refer to Figure 7-7 and locate the dual, 3-pin 
diode near the tower right of the microprocessor 
chip. Desolder and remove this diode. Solder a 
1N914 or 1N4148 switching diode across the 
solder pads as shown. Think ahead. and make 
sure the microprocessor shield won't short against 
the diode when it is replaced. 


Insulate the diode if vou Ке. Power up and enter 
870.000MHz into a channel. If that frequency is 
accepted by the CPU, then disconnect power, and 
resolder the shield. Search will be in the proper 
3OKHz steps. 


Increased Scan/Search speed: Replace the 
blue 8MHz ceramic resonator near pins 3-4-5 on 
the solder side of the microprocessor chip with a 
quartz microprocessor crystal of about 10MHz to 
12M Hz. Don't go any higher than 12M Hz to 
minimize the risk of blowing the CPU. It might be 
а good idea to solder a wire to the metal case of 
the crystal and the other end to ground. 


Squelch improvement: Replace the Squelch 
Hvsteresis Resistor (surface mount chip resistor) 
neiween pins 12 and 14 of the MC-3361 NFM 
Discriminator chin with a 200k vimmer pot. 


Adjust the not sun vour faste for a tighter 
squelch. The zii pot will afford vou a cange of 


PRO-2032 
Cellular Restoration 


This ís a dual diode 


REMOVE ITI 


Can be crushed if 


Solder a 1N914 or 

14148 switching 

diode to pads as 

shown. Observe 
polari 


| adjustment to suit your preference. Too tight of a 
squelch is terrible when weak signals are being 
detected....sounds like a machine gun as the 
squelch kicks in and out. 


See the World Scanner Report, V1N4 
and VIN9, for helpful info and specs 
on various NFM Discriminator chips. 


Also see VIN2, VINA, and VANG for an even 
better Squelch mod for the PRO-2032 and 
most other rigs. This one will get you by, 
though, if you don't have any higher 
ambitions. © 


BC-890XLT — Not a great scanner, 
but it works. (New models are not 
modifiable) 


Access: Remove the 10 cabinet screws. Separate 
the halves. Unplug the speaker. 


Remove 4 front panel screws and the bracket 

screw near the center of the main PCB to loosen 

the front panel, Squeeze the outside edges of the 

metal faceplate shieid Swing the front panel down 
| ioWard you, to expose the Log /CPU РСВ. 
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Disconnect J4 and J5 (white and blue wires). and 
ribbon connectors J501. J502. and J503 — work 
them apart from a point close to the sockets. 
Remove the front pane} and logic beard. 


Cellular: Position the PCB as shown in Figure 
7-8. Locate the CPU (UC-1514), and three chip 
resistors near the CPU’s lower right corner. 
Desolder the indicated resistor marked “104° 


Figure 7-8: BC-890 cellular modification 
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BC-2500XLT — A highly-touted 
scanner for no defensible reason. 
(New models are not cellular- 
modifiable) 


Access: Remove the antenna and battery pack 
from the BC-2500XLT. Position it face down 
with the bottom facing you. 


Remove the two black upper and two lower silver 
screws from the rear. 


Remove the rear case. Lift the now-accessible 
circuit board away from the frame just enough to 
detach it from the white (11 pin) connector. 


Don't strain the ribbon connector between the 
two. 


Carefully, lay the PC board next to the main 
scanner body. 


——— — — — | exerting a little upward 


J / 


mn 
оо 


(100КО) and resolder it to the two empty pads 


nearest the memory retention battery, as shown id 
the drawing. 


Reverse assemble the front panel and connectors. 
Test the radio by entering 880.980M Hz. Cellular 
is now restored, with the desired 30kHz tuning 
Steps. 


| | resistor marked "104" 
ho empty pads as shown. 
First desolder each end 

of the resistor with 
desoldering wick. Then 
heat one end while 


pressure with a sharp or 
pointed object. When it 

pops up, heat the other 

end and let the resistor 
fall loose. Then position [| 
ee ond resolder it to the 
„юшщ empty pads os shown. 


Locate the CPU chip, IC-301, "UNIDEN UC- 
1513A." and the group of five 100КО chip 
resistors marked “104” below it. 


Desolder chip resistor R-317 (see Figure 7-9) with 
desoldering wick. 

Heat one end while exerting a gentle upward 
pressure with a sharp or pointed object until it 
pops free. 

Heat the other end until the resistor falls free. 
Position it on the empty solder pads one place to 
the left, and resolder it in place. (In effect, this 
moves one end of R-317 from ground to * 5V.) 
One end of R-341 always goes to pin 33 of the 
CPU chip. 

Reassemble by reversing steps | and 2. 

Test by entering 880.980MHz. Cellular Search 
steps will be the proper 30kHz! 
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Figure 7-9: BC-1500 cellular restoration 


BC-200XLT, BC-205XLT, Regency 
4030 — Decent handhelds, and the 
same radio! 


This product, in 115 several guises, is everywhere. 
It's offered on television shopping channels, 
buried in general-mercbandise catalogs. in swap 
meets, and nearly anywhere that electronics are 
sold. 


It is definitely among the most successful of 
Uniden's products, if vou judge by SALES the 
way they do. it’s been around so long, and 
wearing so many labels, that there's confusion 
resulting from production changes. FH try to help 


Cellular: The mechanics and specifics of this 
mod were published in Vols 1 & 2, and they differ 
somewhat due to at least one production change 
between books. Depending on the age of your 
unit, vou may need one, the other, or THIS one 
that follows. Yep. Uniden made more subtle 
changes, enough to confuse many who followed 
the instructions in Vol-2. 


Here's the hack you need to restore cellular in 
these radios built after my Vol-2. 


Locate the 10К resistor, R-215, that goes from the 
CPU, pin 41, to ground. It may be a black chip 


ШИШ ii 


e 


Move this resistor from here 
=== TO here (one pair of pads to ihe feft) 


resistor. marked “103”, or it could be color coded, 
brown-black-orange. Doesn't matter. 


It's the resistor just above the "den" portion of the 
"Uniden" logo on the UC-1147 CPU chip. 


Remove R-215 safely, if you can; otherwise crush 
it and then unsolder it. Clean up the pads. 


Solder a small {0k resistor from the non-grounded 
pad of R-215 (CPU-pin 41) to 1С-206, pin 8, 
which happens to be a handy source of 45V. 


That's it, wrap it up. In effect, this mod removes а 
ground (low) via R-2]5 to CPU pin-4) and 
applies a high (45V) via a new 10k resistor to 

pin 41. 


In reality, it's just a logic change. 


Speedup: These radios can be modestly sped up 
by removing a two-leaded black object called 
Y-201 in the left center of the board. It may be 
marked “400K”, 


Y-201 is a 400kHz ceramic resonator that 
connects to the CPU, pins 45 and 46. Replace it 
with an 800kHz ceramic resonator for a X2 
speedup, if you don't mind a halved delay time. 


Get DigiKey part no: P9947-ND, or I can supply 
in limited quantities. 


BC.700XLTA — Let's help each other 
on this mystery! ; 

Sorry, I have little information on this allegedly 
cellular restorable scanner. 


If you know of anything or can cite а reference, 
please let me know. As always, such information 
will find itself onto the BBS and be available to 
everyone. 


PRO-2022 — A PRO-34 clone, nice in 
its time, but now? 


Comments: The PRO-2022 is a carbon copy of 
the PRO-34's design! I know, the 34 is a 
handheld and this one is a base and they do not 
look alike. Compare the schematics, though. 


They're twins! Circuit symbols will differ widely. 
of course. Otherwise, what can be done to one càn 
be done to the other. 


Cellular: Clip or remove diode D-44. 


Speedup: Replace CX-1 with а 3.57MHz TV 
Colorburst crystal for a modest speedup. If that's 
not handy, pick anything close in frequency. 


PRO-2026 — A pseudo-clone of the 
BC-760XLT (new models are not 
modifiable) 


Radio Shack isn't particular about who makes 
their scanners anymore. I guess the marketers 
decide that we want a certain performance at a 
certain price, and then they get bids from the 
manufacturers and take the low one. 


Uniden makes this опе, a semi-clone of the long- 
lived Uniden BC-760XLT, except that it’s more 
hollow inside than its near-twin brother. 


CTCSS is not feasible. It’s easier to hack for 
cellular, though. 


Cellular: Remove the four side screws from the 
bottom cover. Pull the cover loose and set it aside. 


Facing the front of the 2026 and with the bottom 
side exposed, locate the small circuit board in the 
lower nght-hand corner and find jumper 1201. 


Cut L201. If you’re compulsively neat, desolder 
and remove the wire. 


Reassemble the radio and find continuous 806- 
956MHz coverage and 30kHz search increments 
in the cellular band. 


Cheek*: The Ultimate Scanner 


It's odd, but its near-twin BC-760XLT steps only 
in 12.5kHz increments! 


BC-760XLT, BC-950XLT, Regency 
R-1600 — All the same radio, and 
new models are not modifiable 


Cellular: Older units use a Motorola antenna 
connector while newer units have a BNC 
connector. 


The procedure for older units is in Vol-1 of my 
Scanner Modification Handbook, and later units 
are covered in Vol-2. If either method fails, then 
the next mod should work for the last models just 
prior to those made after March. 1994: 


All work 1s done on the solder side of the board. 


For reference, locate a 24-pin surface mount chip, 
IC-13, a Sanyo LC35]7BM-15, on the solder side 
of the board. Position the radio so the "Sanyo" 
logo on this chip is upside down. The work will 
then be done to the right and slightly above this 
Sanyo chip along the row of pins 1-32 of the CPU 
chip. 


Incidentally, this Sanyo chip is the 2k x 8 SRAM 
that figures into the Extended Memory mods that 
your scanner deserves. 


1. Completely isolate pin 26 of the CPU chip, 
IC-14, a UC-1246. 


This involves a trace cut on each side of pin 26 to 
totally isolate it from everything. 


Note: IC-14 is the large 64-pin chip found on the 
component side of the board, but we'll be 
working on its pins from the backside of the 
board. Identify pins 1-32 before you begin. 


2. Make three jumpers as follows: 


One jumper between pins 19 and 20 of the CPU 
chip. 

À second jumper between newly isolated pin 26 
and pin 27 of the CPU chip. 


A third jumper between the two pins on the same 
side of Q-5. just above pin 27 of the CPU. 


3. Finally, remove R-13, a 4.7k chip resistor, 
marked “472” that goes to pin 20 of the CPU. 


Run a short connector wire from the jumpered 
pins 19 and 20 (above) to a nearby circuit board 
ground spot. 


That's it – you're finished! 
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BC-855XLT — Not a great scanner, 
but some people say it works... 


Access: Disconnect the power cord and with the 
bottom edge of the scanner facing you, turn it over 
on a soft surface to avoid scratching. 


Remove the iive Phillips-head cabinet screws and 
carefully separate the cabinet. 


Grasp the speaker plug (not the wires), and 
carefully pull the plug irom sts socket. 


Lay the two cabmet halves side-by-side. 


Cellular: Find the fifth jumper in a row at the top 
of the nght-hand circuit board. 


Cut JV-209 at its midpoint and curl the cut ends 
apart so they can not touch anvthing. including 
each other. 


Solder one end of a 10k resistor to the cathode of 
diode D201. 


Solder the other end of this resistor to the cut end 
of JV-209 that's closest to the center area of the 
board: do not use excessive heat. 


Check the jumper beneath the board: if it came 
loose, resolder, and hold it in place as the solder 
cools. 


Plug m the A/C power cord: turn the scanner ON 
and press MANUAL : 880. : ENTER in that 
order. If 880,000 appears in the Display. the 
effort was a success: otherwise ERROR will be 
displayed as usual. 


Don't panic when you hear nothing — you just 
checked the logic, not the audio. The speaker is 
disconnected. Snip off and remove excess wire 
from the resistor leads. plug in the speaker 
connector, and reassemble. 


How it works: In the simplest analysis. a 
ground is coanected to the CPU (IC-201 pin 10) 
via jumper JV-209, which places a OV (low) at pin 
10 to block the cellular coverage. 


You ve clipped JV-209 to remove that ground. 
You then applied +5V (high) to pin 10 via that 10k 
isolation resistor to program the CPU to cover the 
cellular bands. The cathode of D-201 was just a 
handy source of 45V. 


Simple. huh? 


Memory Upgrade: Examination of the 
schematic diagram suggests that 50 channels tn the 
ВС-855ХІТ may have been deliberately blocked. 


À pinout of the CPU shows a 100 channel 
memory if pin 9 is raised from ground to 45V. 


Referring to the above cellular restoration 
procedure, find the jumper wire immediately to the 
LEFT of JV-209, the one that was clipped. This 
will be JV-208 which also must be clipped. 


Solder one end of a 10k resistor to the cathode of 
diode D201. 


Solder the other end of this resistor to the cut end 
of JV-208 that’s closest to the center arca of the 


| board: do not use excessive heat. 


| 


| 
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Test the scanner for memory channels 55-100. 
Some reports have it that the unit will be locked up 
when first turned on after the memory mod. 


If so, disconnect the unit from all power for a 
short time to leak away internal power, and try 
again. No harm will come from this procedure. 
and if it fails, you can always remove the resistor 
and resolder the clipped jumper. JV-208. 


Please tell me (and everyone else on the BBS) 
about your results. 


PRO-2030 — 
A second generation PRO-2026 


Credit: Courtesy of (and thanks to) Neil Filby. 
WAGHDO. Chuia Vista. CA. 


The cellular restoration for the PRO-2930 is 
essenually the same as for the PRO-2026. except 
that the location of the jumper differs shghtly. 


Access: Remove power cable. and flip the unit 
upside down. 


Remove five (5) recessed screws from bottom: 
panel. Carefully remove bottom panel. With 
display panel facing you. examine the portion of 
the printed circuit board that's attached to the 
d'splay module. 


Look for something similar to an RF coil, about 
2" in from the front and 2" in from the right side. 


Cellular: Cut the jumper marked 1.201. 
Reinstall the bottom cover and reconnect power. 


The scanner is now ready for use. Cellular 
frequencies are fully restored, and with the desired 
30kHz spacing between channels. 


What a coincidence! 
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PRO-46 — (Groan) 


The Manual: Don't search for great secrets in 
this Uniden-built scanner, folks. But it will go 
cellular if you have the patience to dig in and 
sweat it out a little. 


You really need the service manual for this unit, 
so get it as a reference, follow these instructions 
and Figure 7-10 very carefully, or forget cellular 
capability. 


Access; Disconnect the antenna and remove the 
battery pack. Extract the four screws from the rear 
case. 


Push up from the bottom of the case so that it 
swings up and can be removed. 


Examine the now visible main circuit board. and 
carefully pry it up from the area of the mating plug 
in the lower right corner so that it separates from 
the board beneath it. 


Desolder the fragile copper shield from the logic 
board: remove it and lay it aside. Be careful: this 
shield is easily damaged! 


Figure 7-10: Key sites on the PRO-46 


PRO-46 CELLULAR 


IC-205 
R-227 


R-226 


Move R-226 to here 


Cellular: Hold the unit so the speaker is down, 
and look along the right edge of the logic board. 
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Locate IC-205, a 3-pin device about a third of the 
way down from the top. 


Now look below [C-205 for the first two chip 
resistors (actually chip jumpers) marked R-227 
and R-226 on the PCB. 


These two components will have а "0" imprinted 
on them. Carefully remove them both. 


Now look about .5" to the left of where R-227 
was removed to find R-221. 


The right end of R-221 connects to a short PC 
strip that runs up and down about .5". To the left 
of that PC strip are two empty jumper pads. 


Solder one of the removed В-227 or R-226 to the 
upper of the two pads and to the PC strip to which 
the right side of R-221 is soldered. 


Reassemble the unit in reverse order of Steps 1-4 
above. 


PRO-2027— (Moan) 
Cellular: Remove bottom panel ( 4 screws ). 


Locate diode D35 located behind the «Enter? key. 
This is a surface-mount component that resembles 
a tiny black rectangle. 


Desolder and remove D35. 


This is done by gently prying up the component 
with a pin or tweezers while touching one leg with 
à soldering iron. Don't apply much heat for very 
long at one time. 


Wrap it up; party's over. Operate normally. 


LAST WORDS! 
1. Be careful and patient. 
2. Keep the manual in front of you. 


3. Don't illegally listen to cellular — it's boring, 
anyway (or so I’m told). I helped you put fuel 
injection on your hot rod, but that doesn't mean 
you have to speed, nght? 


4. REPORT BACK! Get on the BBS and share 
your experience with me and everyone else trying 
to optimize their scanners. The best way for you 
to learn about a new hack is to support an 
environment where everyone shares information. 
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COMPUTER INTERFACES 


If it’s an Ultimate Scanner, it's wired to a computer... 


NO LONGER A LUXURY 


Ws as obvious as tomato juice on a white shag 
carpet that scanners with lots of channels need 
automated computer programming. The Cosmic 
Light will inspire you the first time you punch in 
400 channels only to discover an error on #47. 


If you've done my 1,600 to 25,600 channel 
Extended Memory Mods. that Light will sear your 
retinas. 


GENESIS OF COMPUTER INTERFACES 


Would you believe that computer interfacing of a 
scanner is nothing new? Years ago, an ad in 
Monitoring Times offered plans for a Commodore 
64/128/PRO-2004 interface. 


i mentioned this to Lin Burke. a digital guru. who 
whipped up a functiona? interface for the Radio 
Shack Color Computer П. He went on to modify 
it and its associated BASIC program for my Apple 
He of the time. Then came a design by Miles 
Abernathy for the Macintosh computer. We 
converted that design and its BASIC control 


program for my Apple Ie. They all programmed a 
scanner's memory by automated means. 


Next came a commercial, universal interface kit 
from RW Systems, and an MS/DOS-specific 
interface package including software from 
Datametrics, Inc. The kit from RW Systems held а 
lot of promise because (1) it was universal for 
most computers and (2) computer-specific 
software was not required to run it. It needed 
only a seria! communications port and a plain 
telecom program — and 1t worked. Unfortunaiely, 
RW Systems either didn't sell as many interfaces 
as they expected, or else they weren't patient 
enough to wait around for the idea to catch on. 
RW Systems went out of business (to the best of 
my knowledge), though their interface did a good 
job with a variety of computers and software. 


EVOLUTION 


The Datamietrics Interface package is stili available 
at this writing. probably because it comes 
complete, ready to install in any MS/DOS-based 
computer with 640k RAM and a parallel port. The 
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Datametrics interface works only in IBM/clones 
and is driven by proprietary software. The 
interface is easy to install and virtually foolproof 
in operation. 


The RW Systems kit supports any of the PRO- 
2004/5/6 series, while Datametrics specifies theirs 
to be for the PRO-2006 only. After looking it 
over, I think it is a safe bet that it will work just 
fine in the PRO-2005. and can be easily adapted to 
the PRO-2004, but Datametrics actively supports 
only the PRO-2006. 


Enter “Professor Peabody,” occasional columnist 
for the monthly World Scanner Report. That fine 
fellow and his able assistant, “Sherman,” 
concocted a do-it-yourself computer interface for 
the PRO-2004/5/6 and presented it in great detail 
in still-avaitable back issues, V2N2-V2N6. 


Professor Peabody's "FatMan" interface was 
distinguished by its ability to work from most any 
computer with unsophisticated software, and it 
controlled every function of the PRO-2004/5/6. 
People are still building the “FatMan” today. 


Rather than take space to repeat it here, I refer 
interested builders to those issues of the World 
Scanner Report where the instructions reside in all 
their splendor and glory and where the ol’ 
Professor still helps those who need tech support. 


Shortly after the “FatMan” appeared, HB 
Technologies (now defunct) and COMMtronics 
Engineering (alive and well) introduced the potent 
and awesome HB-232 Scanner/Computer 
Interface. 


COMMtronics Engineering further evolved the 
interface into the CE-232, which is presented in 
the pages ahead as a do-it-yourself, no charge, no 
royalty, honest-to-goodness, “gimme.” The CE- 
232 project is offered as the center of your 
Ultimate Scanner, and you paid for the right to 
build it when you bought this book. But there are 
other options... 


Most recently, Optoelectronics, Inc. introduced 
their OptoScan 456 Interface for (Һе PRO-2005 
and PRO-2006. Its basic principle is to replace the 
scanner's CPU in controlling the receiver's PLL 
circuits. 


Installation is reported to be fairly easy, with not 
too many snags. The OptoScan 456 comes 
complete, albeit with a somewhat minimal 
software control package, which led to the 
emergence of third-party software products that 
are available to properly complete the project. 


WHAT'S OUT THERE TODAY 


For more information about commercially 
available interfaces, contact: 


Datametrics, Inc. 
2575 South Bayshore Drive, Suite 8A 
Coconut Grove, FL 33133 

(no phone available at this time) 


Optoelectronics, Inc. 
5821 NE 14th Ave. 

Fort Lauderdale, FL 33334 
800-327-5912 


COMMtronics Engineering 
POB 262478 

San Diego, CA 92196 

BBS and FAX: 619-578-9247 


5:30pm-1:30pm Pacific Time, only 


WHAT A PROPER INTERFACE DOES 


Before you even think about buying an interface, 
or rolling your own, you should know more about 
scanner/computer interfaces in general. 


Focus nowadays is correctly on a TWO-WAY 
interface, one that not only can program the 
scanner's memory banks and control the scanner 
remotely from the PC, but that can also acquire 
and pass data from the scanner to the computer for 
logging and processing of active frequencies, 
duration of transmissions, dates, times, and much 
more. This means data acquisition and control. 


A well-designed two-way interface between 
scanner and computer can perform great deeds, 
and you don't even have to be there! 


The most important function of an interface is 
probably to program memory banks, sparing us 
drudgery and opportunity for error. 


An important secondary function is data logging 
and processing, which produces a database of 
your specific area of interest. 


Half the fun of scanning is listening to what's 
going on; the other half is the accumulation of 
knowledge and understanding. 


An interface that can pass data from the scanner to 
the computer for logging, processing, and storage 
produces a long-term benefit with long-term 
implications. In comparison, actual monitoring is 
relatively short-term fun. 


Therefore, both sides of a scannet/computer 
interface are important and useful, but some 
interfaces go only one way. Be demanding! 


Computer Interfaces 


CAPTURING SCANNER DATA 


There are perhaps one or two ways to obtain data 
from the scanner, The CE-232 Interface 
introduced the only practical technique for the 
casual hacker: decoding the data that flows from 
the scanner's CPU to the Liquid Crystal Display 
(LCD). 


That data stream contains most everything 
pertinent to scanning with the exception of 
time/date, and the computer can provide that. The 
system decodes data that flows from the scanner's 
CPU to the LCD, but some of that data is 
superfluous and has to be removed. The required 
data going to the LCD includes the following: 


Manual 
(On/Off) 


Search step 
(5, 12.5, 30, 


Frequency digits 


Channel number 


and 5OKHz) 
Mode (AM/NFM/WFM) Search 

direction 

(up/down) 
Delay Bank 
(On/Off) (0-9) 
LockOut Priority 
{On/Off} {On/Off} 


Missing — but useful — are time, date, duration of 
transmissions, and squelch status. There are other 
potentially important data that would be nice to 
have captured by an interface with an S-meter, 
such as center-tuning or frequency errors, and the 
status of other mods you may have done, such as 
Extended Memory Blocks, Extended Delay, 
Automatic Tape Recorder Switch, and more. 


The ideal interface, then, will capture and send to 
the computer not only the normal data that appears 
in the display, but also à variety of other data that 
relates to the scanner, and to thc session. 


SCANNERS ARE NON-ERGONOMIC! 


The design of one of the most user-friendly 
scanners Гуе ever seen has not been replicated to 
date: the PRO-2004. Whether or not ics 
deliberate, iC s а fact that scanners seem designed 
to be operated and monitored from a distance. The 
kevboards are densely congested and designed lor 
fingers about the size of toothpicss. Ап ideal 
interface will allow full operation and control of 
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the scanner from the computer's keyboard where 
even pickles for fingers can hit the right Keys at 
the right time. 


Scanner displays don't seem designed for human 

eyes. Readouts are small, poorly illuminated, and 
often must be viewed from very narrow angles. A 
good interface presents an image of the scanner's 

display on the computer's monitor, so you can see 
all the information, from a distance. 


MY PRESCRIPTION 


Let's talk about either rolling your own high- 
performance scanner/computer interface or 
acquiring one for the least possible effort and cost. 
Many CE-232 Scanner/Computer Interfaces (and 
its predecessor, the HB-232) have been 
successfully tested and used by hobbyists and 
commercial interests for several years. 


The following project offers a lot to most owners 
of the PRO-2004/5/6, and of certain other 
scanners such as the PRO-2035. PRO-2022, 
PRO-43, PRO-39, PRO-37, and PRO-34. 


Now, with the PRO-2004/5/6 scanner series 
passing into history, I am literally giving you the 
design of the CE-232 —it’s here. complete, in this 
book. lt's too powerful and wonderful a tool to 
keep às a strictly commercial venture. 


If you have knowledge of electronics and general 
hacking skills, you can build the CE-232 for 
vourself at modest cost. 


LEGALESE 
Of course, there are a few catches to this deal... 


CATCH 1: The design and assembly instructions for 
ihe CE-232 as presented herein are copyrignted 
£1992 by COMMtronics Engineering and Bili 
Cheek, and may not be used for any commercia: 
purpose or application without the express written 
permission of, and license granted by, the author. 


License is freely given and permission freeiy 
granted for individual use of the design, drawings, 
and instructions solely to readers of this book for 
strictly honby applications. 


You may not. unaer tris license, use the materia! 
gresented herein to produce «ts cr finished 
products fcr! resale nor for use in anv commercial 
enterprise. 
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CATCH 2: The CE-232 Scanner/Computer Interface 
requires software expressly designed for it. This 
software is not simple or easy to show in print, and 
it will not appear in this book. If you desire to build 
the interface but not write your own software, for 
the cost of disk duplication and shipping l'II send 
you an [BM/PC-compatible control program, plus 
supporting programs and files for the CE-232. If 
you elect to write your own software, l'il help by 
giving you the Developer's Kit, but cannot take 
responsibility for, or directly assist, your work. 


The materials that | provide are “copyrighted 
freeware," which means the package is freely 
available for individual, non-commercial use for 
only my cost of duplicating and shipping. 


This software package is “complete” and 
powerful, so there is little reason or need for you 
to develop your own software unless you enjoy 
that sort of thing. 


This complete software package is available for 
$9.95, ppd (USA), only on a high density, 3.5" 
floppy disk in MS-DOS 3.1 and up format and 
compatibility. Add $5 special handling for 5.25" 
disk. Payment in US Funds, check, money order, 
MC/VISA, to: COMMtronics Engineering, PO Box 
262478, San Diego, СА 92196 or (619) 578- 
9247 (1:30-5:30pm, Pacific Time). Foreign 
shipping and handling add USS$10. 


CATCH 3: The CE-232 as presented herein is strictly 
for the PRO-2004/5/6 scanner series. Other 
scanners are supported, but you must contact me 
privately or on my BBS for that information. 


CATCH 4: The CE-232 is Known to work with virtually 
all modifications that can be made to the PRO- 
2004/5/6 with one important exception: It will 
NOT work with scanners that have been speeded 
up by means of a faster crystal. The standard 
diode speedups are okay, however. 


All other mods of which | am aware will work just 
fine with the CE-232, though some may require 
slight alterations regarding where or how they are 
installed. 


CATCH 5: | support strictly IBM/PC compatible 
computers, but third parties have written software 
that lets Macintosh computers control the CE- 
232, so if you need software for the Mac check 
the resources listed in this chapter or on my BBS. 
Formats for other computers are not available. 


Other third parties that have written shareware ог 
commercial contro! programs for the CE-232 
Interface are identified on my BBS. 


READ THIS FIRST 


These instructions are geared for PC-compatible 
computers with MS/DOS 3.1 or higher, and a 
minimum of 512k RAM, though 640k is 
recommended. Operation of the CE-232 is 
possible from a floppy disk, but a hard drive with 
2 MB free is better. 


This version of the CE-232 Scanner/Computer 
Interface is expressly for the PRO-2004/5/6 
scanner series, 


It will work, as shown herein, for certain other 
scanners at reduced capability (1-way interface), 
but special add-on software and hardware are 
required. These other scanners include, but are not 
limited to, the following: PRO-2035, PRO-2022. 
PRO-2021, PRO-34, PRO-37, PRO-39, and the 
PRO-43. 


Features and functions of the 2-way CE-232 
Interface are: 


€ AutoPrograms scanner's 400 memory channels 
in 8 minutes (typical) 


e Remote-Controls scanner keyboard functions 
from the PC 


è AutoLogs contents of scanner's display 
(“hits”) to a text file or a printer 


• AutoLooksUp and displays your frequency 
data when a “hit” occurs 


€ AutoRejects “birdies” and undesirable 
frequencies — no false stops! 


€ Script feature allows unlimited automated 
contro] 


Ф User Switches; status and control registers for 
generic purposes: data acquisition and control 


¢ Proved technology; reliable and effective 


CONNECTIONS 


The CE-232 Scanner/Computer Interface connects 
between a PC/XT/AT-compatible computer and 
the scanner. А standard serial cable connects the 
CE-232 to the computer's COM! or СОМ? port. 


The CE-232 can be installed inside the scanner for 
a tidy package, or it can be built into a small 
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project box, with a short cable and plug to mate 
with a receptacle mounted on the scanner. 


External installation allows a CE-232 to be used 
with more than one scanner. The scanner is not 
appreciably modified by either approach; rather. 
approximately 20 wires go from the CE-232 to 

various points in the scanner. 


Absolutely no scanner features or performance are 


altered or sacrificed to gain the automated features. 


FEATURES /FUNCTIONS 


From a functional viewpoint there are no 
compromises whatsoever. The system has the 
following features and capabilities: 


AutoProgram; in about 8 minutes it will insert 
up to 400 frequencies of vour choice into the 
scanners memory channels, along with custom 
settings of DELAY. MODE, and LOCK-OUT. 


Try to program 400 channels by hand in under àn 
hour or two... and what if you find а mistake with 
the channels out of sequence back on Ch-30? The 
AutoProgrammer uses plain ASCII text files. by 
the way. 


View and control all standard scanner 
keyboard functions from the computer. The 
monitor dispiays a monochrome or color facsimile 
of the scanner's keyboard and LCD. Whatever 
shows tn the scanner's LCD at any time is 
simultaneously displayed on the Monitor. 


Press M on ihe computer keyboard for 
MANUAL. press S for SCAN. or press P for 
PRGM. All of the control keys of the scanners 
keyboard are active at vour computers keyboard. 


The scanner operates directly from the computer 
keyboard exactly as it operates from ils front 
panel. In fact, you can operate from either location 
alternatively or simultaneously at any ume. 


AutoLogs to a handy text file the details about 

every "event" seen by the scanner. For example, 
the AutoLog mode senses when the SQUELCH 
breaks (a signal comes in). 


It then commands the computer to write and 
append a line of data to a text file. containing 
channel number or SEARCH Bank, frequency. 
MODE setting (NFM. AM. or WFM), DELAY 
status (On or Off), LOCKOUT status, SEARCH 
Mode and STEP increment (if applicable), Date, 
Start Time, and Duration of transmission, 
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This file is "comma-delimited" to make it easy to 
load into a database manager for more processing 
and sorting as desired. 


A text editor is provided with the CE-232 Program 
for a handv way to review and edit your 
AutoLogged Files. The CE-232 AutoLogger files 
its data in the same format as needed by the 
AutoProgrammer. 


AutoLogged files of newly found frequencies in a 
SEARCH mode can be programmed back into the 
scanner's memory for a SEARCH and STORE 
function. 


This process can be automated to eliminate 
duplicates and common frequencies. А dot-matrix 
or daisy-wheel printer can be selected to print 
AutoLogged data in real time as it is acquired. 


The CE-232's Lookup function works when the 
scanner stops on an active frequency. It displays a 
line of text for that frequency on the monitor from 
your file. This reference file can be the SAME file 
used to AutoProgram the scanner. Great for signal 
identification. 


An Anti-Birdie function compares a frequency 
"hit" to the contents of a "REJECT" file, anc 
instantly resumes SCANning or SEARCHing, if 
that frequency is found in the file. It wil] not 
AutoLog these momentary "birdie" stops. 


This superb feature is not limited to just “birdies”: 
you can put up to 32.000 undesired frequencies in 
the "REJECT" file. such as for pagers, computer 
data channels. continuous tones, encrypted 
signals. and other frequencies that vou don't want 
the scanner to stop on or to AutoLog. 


There are easy ways to automare the collection of 
undesirable signals for the REJECT file. The 
REJECT function can be turned on and off by the 
user or automatically commanded by a Script 
function. 


The CE-232 has a powerful script or macro 
function to allow the automation of virtually any 
process that would normally be done by hand. 


A Script can produce a file of what's been 
programmed into the memory channels 
(CHANNEL DUMP). or set a ume limit for stops 
on various frequencies or channels, or lock-out 
every (requency found in a SEARCH session to 
avoid duplicate log entries. 


The CE-232's microprocessor is programmed by 
your computer every time you run the program. 
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No expensive "hard programming" or firmware 
on the MPU chip. 


Not only can low cost upgrades be done, but the 
СЕ-232 has attracted third-party developers who 
have produced many useful tools for the hacker, 
including superb support programs. utilities, and 
hardware. 


Figure 8-1: The big picture! 


PRC-2004/5/6 


The next few pages will present an overview 
followed by graphic details of how to build and 
install the CE-232 Scanner/Computer Interface. 
We start with the overview in Figure 8-1, and 
progress into the gory details, stage by stage and 
step by step. 


This is the path to the Ultimate Scanner! 


But, just in case you're blown away by all this technology................. 


External Installations 


serial Y e 


9-cond straight-thru 


25-cond parallel cable 


MÀ 


Metal project box 


And for those who really need to (KISS) Keep It Simple, Stupid, then................ 


internal Installations 


S-cond straight-thru + 
serial cable 


a 


CE-232 Internal 


Computer Interfaces 


HERE'S THE PLAN 


Okay, bear with me. Whether vou're a new hacker 
or have been around for many years, this is really 
important. 


This is Chapter 8, and by now you've had to plow 
through a lot of cautions, caveats, and warnings to 
"be patient,” "have a plan." “lay out the parts and 
tools," and more. So why should I do it again? 


Two reasons. First. if 1 do it enough. eventually 
you'll figure out that 1 really mean ir ~in the most 
friendly way. Just like a paint job. if you prepare 
properly the work is a lot easier. 

The second reason is that a lot of you will get the 
book and instantly flip to the chapter that interests 


vou the most. Therefore, Гуе splattered my 
warnings quite liberally throughout this book. 


Well. here we go again... step-by-step. this time. 


1. Examine, assess, and inventory parts. 
materials, tools, and documents. Make a list of 
needed parts. materials. and tools that you don't 
have tn stock... 


This will save vou time, trouble, and 
headaches. 


2. Acquire. install. and pre-test the CE-232 
program and software... 


A confidence builder, and you ve got to do u 
eventually. No sense in building the CE-232 
without software. 


3. Purchase, acquire, make all needed parts. 
materials, and tools... 


This more or less ices down the preparatory 
stages and ensures vour readiness to launch. 


4. Review documents and procedures... 


Final preparations before the ultimate 
commitment. 


5. Build the CE-232 circuit or acquire one. 
6. Install CE-232 board. 


A. Inside scanner (74H C4050 Buffer optional 
but recommended). 


B. Inan external metal box. Build and instail 
the 74НС4050 buffer circuit inside the scanner 
as close to the logic/CPU board as possible. 


If (A) above, connect a straight-through seria} 
cable between the computer's COMI or COM2 
serial port and the input to the CE-232. 


If (B) above, connect a straight-through serial 
cable between the computer's COMI or COM2 
serial port and the input to the CE-232, and a 25- 
cond parallel cable between the CE-232 and the 
scanner. 


Inspect and double check all your work, ensuring 
no mistakes and clean work. To reduce my 
workload. check it one more time. 


Set up and run the CE-232 software. 


You're finished! 


MANUAL 


The forma) manual for the commercial CE-232 Kit 
occupies more than 100 pages. 


The following pages present a compromise, with 
sufficient detail for the technologist and 
experienced hobbyist. 


There 1s no missing key information. If you are 
interested in this project but have doubts, the 
formal Assembly, Installation, and Operation 
Manual for the CE-232 1s available, as are a 
printed circuit board, parts, software, and even a 
packaged kit, ready to assemble for those who 
want the Icast hassle. 


You can even download the full manual from my 
BBS, free. The end of this chapter will discuss the 
options available to you. 


Table 8-/A is a list of all the materials that you 
must have on hand before you start, and Tabie 
8- 1B lists the nice-to-have stuff. 
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Table 8-1A: CE-232 parts, materials, and supplies — mandatory 


Qty Circuit 
N | Symbol 
__| Program 
1 Doc 
— l PCB 
—l XU-3 
...) IC-) 
__) IC2 
кн 1 3 
3  [C-4,5.6.? 
Ld [CR 

|: [C-9 


4 C234 
6 


206 CS thr 16 
__! CIJI 
_ 2 С-12.15 
—_ 2 C-13,14 
— 8 D-) thru’ 
—l R4 
— l| R2 
—4 R-4 thu 7 
__2 RN-2 
__| RN-3 
__| RN-4 
— I XI 
1 PC 

1 MAN 


* These parts are hard to find. Try Future Active at (800) 757-9438 or COMMtronics Engineering 


Circuit 

Description 

Current program and files (from the author. 3rd parties, or your own),.... 
At least this book. ideal to have the full manual.............. esses 
Printed Circuit Board, ready to assemble (author's or yours).................. 
PLCC 68 pin Leadless Chip Carrier Socket for ІС-3........................... 
MAX232CPE RS-232 Receiver/Transmitter (AD-232 1$ okay) ............ 
TL?7757C or MC34064P-5 Undervoltage Sensing Integrated Circuit ...... 
MC68HCIIFIFN Microprocessor Unit. or ХС6&8НС11Е1ЕМ.............. 
74НС4066 Quad Bilateral Switch... ia, Saoet atte falta deri e tod 
*8L05 Voltage Regulator. +5\/ @ )0ОтА........ sss se 
74HC4050 Hex Non-inverting buffer... aaas ОООО. ; 
Capactiay. electrolyuc, 220E/35 WVDC 2... uis sse sen 
Capacitor. monolithic. 0. Ii F/50 ЖУРС....,. 2... sse 
Capacitor. electrolvuc, 4.7рЕ/35 МУРС................... seen 
Capacitor, electrolytic. ].OUF/35 МУрС..................................... 
Capacitor. monolithic. 22pF/50 МУРС..............................а.. 
Diodes, switch, silicon, 1N914 or IN4148. aaaeeeaa eenen 
Resistor, 100, 1/4-ммац.............. cee cess cece cee tee eme ennemi nin 
Resistor, 1009), 1/4- Wat... ccc ындыы ынкы ШНА лый АРЕ 
Reststor, 47kC2, TAAA Codie dit ode danne ee a aa E nemen 
Resistor Network, 10 pin wus, 10КО.................... eee 
Resistor Network, 8 pin wus, lOkQ...... esses 
Resistor Network, 6 pin w/bus. 4,7КО.......,.......... дуб, 


Crystal, quartz, HC-18, МН... emn 


All parts numbers are 


DigiKey or Radio Shack 


unless noted 


Source and Part # 
COMMtronics Eng 
COMMIironics Eng 
COMMtronics Eng 
A419-ND 
MAX232ACPE-ND 


ж 


ж 


MM74HC4066N-ND 


. AN78LOS- ND 
. MM74HCA4050N-ND 


RS# 272-1026 


. RS8 272-109 


RS# 272-1024 
RS# 272-1434 
RS# 272-806 
RS# 276-1620 
RS# 271-1365 
RS# 271-131] 
RS& 271-1342 
Q9-103-ND 
Q7-103-ND 
Q5-472-ND 
CTX-056-ND 


PC/compatible. 512k RAM (min). w/9600-baud COMI or COM2 port and MSDOS 3.1/up 


Service Manual for your scanner: call Tandy National Parts (800) 442-2425 
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Table 8-]B: CE-232 parts, materials, and supplies — “nice-to-have,” or useful 


Е 


АЛІ parts numbers аге 
DigiKey or Radio Shack 


Circuit Circuit unless noted 
Symbo] Description Source and Part 4 
1-1 DB-9 jack, male, mates w/W-1 below RS#276-1537 ar 276-1538 
1-2 DB-25 jacks, female, mate w/W-2 below RS#276-1548 
LED-1 Light Emitting Diode (LED), choice of color RS# 276-1622 
R-3 Resistor, [kQ, 1/4-wati RS# 271-1321 
Уу. | Serial cable, 9 canductor, straight-thru (not null-modem), w/female 
DB-9 on one end (see text) 
W-2 Parallel cable, 25-conductor, shielded, DB-25 male-todB-25 male RS#26-249 
XU-] IC Socket. 16 pin, DIP, Low Profile RS# 276-1998 
Best is DigiKey AE-7216 
XU-4.5.6.7 IC Socket. 14 pin. DIP, Low Profile RS# 276-1999, Best is DigiKey АЕ-7214 
Misc Wire, insulated, 22 gauge, stranded, best are wires salvaged from cable -> RS #278-776 
Misc Mounting studs RS# 276-195 
Misc Pin-line sockets, see Chapter 3 A-208 
Misc Metal project box RS# 270-253 
More hack than factory ! 


This PRO-2004 has an (early) CE-232 interface, S-meters (analog and LED) 
25,600 channels, Data/Tone Squelch, SCA decoder, and much more. 


pneus ^ 
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Figure 8-2: CE-232 System Block Diagram 


j |IBM/PC Compatible Computer } 
i 512-k RAM (min) - MSDOS 3.1/up} 
; 9600-bps COM/Serial Port | 


PRO-2004/5/6 


COM) or СОМ2 serial рогі on 
computer with male DB-9 or 
D8-25 connedor 


Straight-thru serial cable with a female DB-9 
os connector оп the СЕ-232 end and either a 

female DB-9 or DB-25 on the other end to 

match the computers COM] or COM? port. 


Length of the serial cabe is not . . 
See W-| in Parts List.. 


critical. Successful results have been 
achieved a? lengths to 25-ft. Longer is possible. 


Famale DB-9 connector on the end of the serial 


cable mates with a male DB-9 Jock on an external 
A project box or on the cear of the scanner, 


NOTE: Pins 1,4,6 & 8 are jumpered 
but do NOT connect to the CE-232. 
Pins 7 & 9 don't connect to anything 


1 
| NOTE. The СЁ-232 coa be built into o metal 
1 eraieci box and coatomed withio the doshed 


1 box os shown here. Allemotively, ч con be , Opuonal 
| inslolled inside ће sconner lo adher case, the OutBprie 0 
‚ only aquired connections to the scanner ore OurByte 1 
| Pomi; H thru 2, АА./7 ore purely optional, OusByle 2 
Орһоло! Ove 3 
5 Оче 4 
От 4 Outiyte 5 
Swiiches Ovibpe & 
Ovtbrie 7 
Ophonal ERE ПАРОМЕ Kien СУЕЕЕИН PERIPE CENERE КЫНА АЛЕН T чарен НЕН RA РИИ КЫ ТИ КСА РИШ ИГИ EIEE SEEN „' Орюгоі 
Status laput 0 AA BB CC OD G A B SS TT UU VV WW XX ҮҮ 22 КК] : (һбуте O 
Status Input ) am inByte 1 
Яо Input 2 T (nByte 2 
Stotus Input 3 C 9 Pe d taByte 3 
Staus 4 
lucum E.2 32 Interface oar pee 
Ую input 5 2» Әуе 5 
: (оВуте 6 
. InByte 7 
| Q R$ T U V W X Y Z i : 
oles ah | CE-232 _ M 
a. Y... \ Cable for external installations 
E m d or hard wiring for internat installs 
бн о J| xl t| M| NT of Pl al rR s| т ul v X 1 Scanner 
: ^4 140 1715: | 
74HC4050 | 
uffe i 
SCK Cs CO sQ Ground 1 : 
To Scanner's To Pins 1-13 of scanner's Keyboard Connector as shown 
Logic/CPU Board f 
P: See text and connection ‘ 
SN Yo +12 DC Power diograms for your scanner ‘ 
4 » (ee 1 OK) i 
1G 1994 
1CO0MMvonkes Engineering 


(Ail Rights Reserved 


ws ca. 
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Figure 8-3: CE-232 schematic 


үр БЕ CONTROL OF 
ы THE SCANNER 


D8-9 Serial 
Plug to PC's 
COMI or CON2 


IC-3 


MC68HCI1FIFN 


Inbym- У 
fnbyse-3 
inbyre-5 
inbyte 7 
Oubyte-J 
Ољуњ-5 
Сибуњ-3 
Ouibyte- 1 
Cah yre-0 


DC POWER 


usually from »conner 


TP-4  TP.3 
REO | (Gg) wp 
R2 
+ 12.6 H 1000 : : > 
(+610 164 [D ГУ» КАЛЕ у IPGA inbym6 |r eg 
To n i | 
4.2/w-2 
M usd Oa feo 9 
Ground BD 10 
N 
12 
CS-C}O .. 
& va б-н” 


DATA FROM SCANNER'S 
Logic /CPU borg) 


Ч AA 
Sen abo | t» AA 
d EB User 
> BB Switdies 
4 SPST 
> СС 35v @ 25-ma 
qno "^ 
> DD 


J-2/W-2 
Output Jack & Cable 
wanes with Inslailation 


DU» = Direction of Signal Flow 


сіс a No Connechon Unless instructed 
© » Soláeced Connection on РСВ 


Cola Zt 


А-2 = Mandontery (npul/Outpuh 
АА-ЇЛ = Optional ingut/Ovtputs © -1904 COMWrenla Engineering 
" АЙ Right Reserved 
с?" а СЕРУ? Board с> Pe INPUT «5. 
3 = GROUND This diagram is Юг CE-232 Boords 
y with a PCB morked on the solder side 
; = + А Я 
TS 2 V GROUND | ['CE.232. COMMbhonies Engineering 
5214N мм d | Use €orrect monuoi for your board 
en c esa a bee oy al m ross 
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Figure 8-4: CE-232 circuit board - component side 


To Scanner Keyboo:d Connedor User Switches 
at 01-04 ot D5-08 ot R4-R7 


Spare 
Ground 
М 
IC-2 
MC34064 
or : 4 | 
117757С М D 
Ha тр.4 
+12.6v 
С-З 
TR5^7 MC68HC11F1 FN Nat 
+5у Ground 
ІС2 Pin 1 б 
Ч 
rel TP-2 
ы + 5у Reg 
ES Note: The traces thot can be seen 
in this view ace an x-ray view. All P 
N 
Ground 
my LT ERRARE, 
7 Fag, lod oll Mi | 
ss wy Ww QQooM | CAUTION: Observe proper positioning 
UU ZZ RR | of all IC chips, resistor networks (RN), 
VV XX pp NN and сарасіогѕ marked wih a "=" Ools 
© -1994 COMMIronics Engineering on IC's and RN's signify Pin-1. 
N OTES i All Rights Reserved 
L Input/Output points are designated by letters A.B,G,H through 2, and AA through ZZ. C thru F are on the DB-9 connector. 
2. Input/Output points can ba hordwirad to thair destinations, but use of PinLine Sockets & Plugs is highly recommended. 
3. Inpui/Output paints EE thru 22 ara non-essentiol ond can ba disregorded during assembly. Pinline Sockets ara suggesied however. 
4. Test Points: TP-1 is ground. TP-2 is regulated + 5v. TP-3 is DC input to IC-8. ТРА is + 12v In to R2, TP-5 is speciol +5v to IC-3. 


Current drain of the CE-232 is calculated by: (((Volts at TP-4) — (Volts at TP-3))- R2) = typical: 1.6v/100 = 16 mo (13-18 mo OK) 
. Voltoge ot TP-5 is criticol. If the microprocessor IC3 is ok, expect + бу. H опу problems with X-1 or 1C-3 circuits, TP-5 will be О-у. 
6. THIS DIAGRAM is for CE-232 boards distributed AFTER 1/1/95. This board is marked on reor 'CE-232 COMMIronics Engineering" 
Previous versions of this board are marked "HB-232* ond "9217" on the rear. Use the right manual lor your version of the boord. 


e 
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Figure 8-5: CE-232 circuit board — solder-side 


DD GcBB AA ls 
О = CE-232 © COMMtronics Engineerlng() 
TE “т TIO 


. 
eo 
IC; 
Ы IC-6 (C-5 » iC-4 в 
cs 6 ? 


1" 

3-5 
V 

NOTES: 

t. Square pads are Pin #1 for IC's and RN's and (+) leads of capacitors. 

2. IC Pin Spacing in the vertical and horizontot planes is 0.1" 

3. Mounting holes and IC-3 access holes are 1/8" dia. 

4. CAUTION: This pattern is NOT to scate, but is accurately proportioned. 


It will be just right if reduced to where IC pin centers are spaced exactly 1/10-inch арап, 
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FOLLOW INSTRUCTIONS 


Before we get into the detail of this project, I 
want to tell you a (true) story. When my 
daughter, Ali, was a 15-year-old 10th grader, I 
gave her a draft copy of the Parts Layout with 
these instructions. With no other special 
preparation or guidance, she was able to obtain 
all the correct parts from our component bins and 
successfully assemble the first production HB- 
232 board. It worked the first time out! 


She made no errors, and the only input I gave her 
was at the end when I insisted on pressing the 
microprocessor chip into its socket myself (I 
should have let her do it). The point is that [ gave 


her no real help, and from the few questions that 
she raised 1 was able to make these instructions 
even clearer and to the point. 


For a painless assembly of the PCB, you need 
only follow the diagrams and instructions. The 
procedure is a proved method and should be clear 
even to those not highly experienced with this 
line of work, like my daughter used to be. 


NOTES: A mention of "No Polarity" in these 
assembly instructions means the component can 
be installed either way. Inspect for solder blobs 
and bridges after every step. Leave all IC's and 
the microprocessor chip in their orginal packing 
until needed. 


Don't forget! 


A resistor's color code begins 
wilh (he color band closesi to 
one end. followed by the 2nd. 
Jrd. & 4th. Disregard any 4ih 
color band. 


1st Color 2/4) 


EA) лу —M— T ES 8 
3rd Color 


Pushing the limits 


А marking of °K” ora 
band denotes the cathode 
of a diode. The unmarked 
end is the anode 


—1Á[E3— — ——&-3—— h ишш} 


Electrolytic capacitors are 
marked with (-) lead in most 
cases. but the short lead is 
always (-) too. 


Here's the Intercept Technologies Voice Activated Digital Electronic 

Recorder (VADER) for use with the CE-232 Interface. 16 Mb of audio RAM 
for 1 hour of continuous recordings, perfectly synchronized with the CE-232 
activity log file. 
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PARTS ID — A REVIEW 


The banded end of a diode is the cathode. The 
unbanded end is the anode. The cathode is 
schematically represented as the bar while the 
anode is the triangle. 


A 10МО resistor is color coded Brown-Black- 
Blue, a 1КО resistor is Brown-Black-Red, a 
1000 resistor js Brown-Black-Brown, and 
АЛКО) resistors are Yellow-Violet-Orange. Zero 
through nine goes: black - brown - red - orange - 
yellow - green - blue - violet - gray - white. 


Resistor Networks (RN's) are identified with a 
dot or a bar at the end where pin 1 resides. 


Pin | of most IC chips is identified from the top 
by a dot or hole next to a notch at one end of the 
chip. Pin numbers increase in a counterclockwise 
direction around the perimeter of the chip, as 
viewed from the top. 


Capacitors C5-10 and C13-14 are non-polarized 
and may be installed either way. The eight little 
(usually yellow) capacitors look alike at first 
glance — it’s up to you to keep them apart. 


The rest of the capacitors are electrolytics, clearly 
marked, and must be installed with the proper 
polarity. The negative (—) lead of these capacitors 
is marked on the side next to the lead. 


PROCEDURE 


A. Install and solder the 68-pin Microprocessor 
Socket, XU-3. 


B. Solder all except those few pins that dead-end 
to no traces or pads. Use a thin-tipped 
soldering pencil, and position the tip so that 
entry is from ABOVE the pin, not from the 
side. This will minimize chances of solder 
bridges from one point to the next. 


After all pins have been soldered, examine 
each with a strong light and a magnifier to 
ensure that each solder joint has "taken" 
properly and that there are no bridges or 
blobs between pins. 


Do not skip this Quality Assurance 
procedure! 


C. Install and solder al! eight jumper wires on 
the PC board. Nete the short jumper (JU-8) 
near IC-2. 


165 


JU-1 is on the BOTTOM (solder) side of the 
PCB. JU-2,3,4,5, and 6 are near the ends of 
IC4,5,6 and 7. JU-7 is near IC-8 and R-2. 


Use #22 to #30 gauge solid copper wire for 
jumpers, OR you can use snipped component 
leads. Make the jumpers neat and clean. 

A void shorts between pads and traces. Snip 
excess wire from a]l jumpers. 


. Install IC sockets for IC-1,4,5,6, and 7, 


observing the proper locations of all pins #1. 
Insert one socket at a time, and solder the #1 
pin of each to its pad. 


Then, pushing down on the socket from 
above the board, melt the solder at pin 1 so 
that the socket slips in and seats flush with 
the top of the board. 


. When all sockets have been seated, solder tbe 


remaining pins of each to their respective 
pads on the bottom of the board. Snip... 


By the way, a strip of 3 pin-line sockets 
makes a good socket for IC-2 and IC-8. 
Purists will solder these and all other IC's 
with exception of IC-7, though. Sockets are 
best for the novice hacker. 


. Install Resistor Networks, RN-J, 2, 3, and 


4. Be sure the #1 pin of each resistor network 
is properly positioned before inserting into 
the holes. 


Pin 1 is designated by a dot toward one end 
of the "chip." Figure 8-4 shows the proper 
orientation of each resistor network. Snip... 


. Pin-line strips: 


Install a 6-socket strip in the Inpu/Output 
holes for Points EE-JJ next to RN-3. 


Install a 9-socket strip in the Input/Output 
holes for Points SS, TT, VV, XX, ZZ, RR, 
PP, NN, and LL next to RN-2. 

Install a 2-socket strip for Points L and M. 
Install a 3-socket strip for J, I, and K. 


Install a 5-socket strip in the Input/Output 
holes for Points WW, YY, QQ, OO, and MM 
next to RN-{. 


Install singie sockets in the spots for UU and 
KK next to RN-I. 


Install 4-socket strips in the spots for O-R, S- 
U, and W-Z. 


nor AA. BB. 


install 2-socact pairs fes cug 
CC, and DD 


Install a 3-socket strip for A. B. and Cr. 


Install single sockets for Point H and ail 
Points N. 


PIN-LINE NOTES: 


1. PIN-LINE sockets are available from 
DigiKey, (800) 344-4539, Part # A-208. 
Another source of low-cost pin-line 
sockets is HOSFELT Electronics, 2700 
Sunset Blvd, Steubenville, OH 43952, 
(800) 524-6464, Part 421-151 (10 pin), 
321-128 (16 pin) and 421-161 (20 pin). 
Hosfelt Electronics may also have other 
configurations of pin-line sockets. 


2, Use of pin-line sockets is optiona). You 
can later hard-wire to all the points if you 
wish. Pin-line sockets are a touch of class, 
however, that make future work, such as 
troubleshooting, a heck of a lot easier. 


3. If you are not going to use pin-line 
Sockets, then skip this step altogether. 
Hard-wiring will come later. 


. Install two capacitors C-13 and 14 (22pF), 


possibly marked "220" and "AIJ" on one 
side; disregard markings on the other side. 


Do not confuse these capacitors with C5-10. 
which look exactly like them except for the 
markings. No polarity. Snip... 


Install six capacitors C5- (0 (0. 10Р). 
possibly marked "104" and “CIK” on one 
side: disregard markings on the other side. 
No polarity. Snip excess leads. 


Install C-12 ( 1nF/35V) near pin 6 of RN-4, 
observing the (+) polarity. The (+) terminal is 
not marked, but is the LONGER lead of the 
two. The (-) lead is shorter. identified by a 
wide stripe with a (—) and a ">" on the stripe. 


. Install C-15 (tu F/35V) near IC-8. observing 


the (+) polarity. The (+) terminal is not 
marked, but is the LONGER lead of the two. 
The (—) lead is shorter and is idenufied by a 
wide stripe with a (— and а ">" on the stripe. 
Install C-11 (4.74F/35V) near RN-3, 
observing the (+) polarity. C- 11 looks 
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exactly Hke C-17 and 15. but is markee 
cafferenty. Refer to Stets H and I above for 
the method to distinguish the proper polarity 


‚ Install Cl. 2. 3. and 4 (22UF/16V), the 


capacitors hear IC-1. Observe (+) polarity 
using the method in Steps H and I. Snip... 


an» f 


Instal] R-1 near pin 6 of 
RN-4, no polarity, standing on end or laid 
flat with the leads properly bent, as shown in 
the sketch above. R-1 = 10MQ (Brown- 
Black-Blue). Flat is preferred. Snip.... 


Install R-2 near C-15. It MUST go flat and 
bridge over JU-7. It is okay to raise R-2 
above the board a little because each end is a 
Test Point at which you'lt measure voltages. 
Ease of access to the ends of R-2 is a big 
consideration here. 


One pin-line socket soldered to each end of 
R2 makes a nice Test Point. Take a look at 
the drawing below. 


Side View - Honzontal m 


Install! X-1, an 8MHz crystal, no polarity. 
Partially insert its two leads into the holes 
provided and then bend X-1 back 90° so that 
it lies flat on top of C13 and 14. 


Pull the leads tight from undemeath the board 
and solder. Snip excess leads. 


This method offers minimum vertical 
clearance but X-] can also be installed 
straight into its two holes, flush with the 
board, otherwise. 


The latter method is technically best for the 
sake of shortest leads. but X-! is the tallest 
item on the CE-232 board and could interfere 
in tight installations. 
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Q. Install JC-2 near RN-4 (looks like a 3-lead 
transistor), observing the proper polarity of 
the 3 leads. (Flat side faces RN-4.) Snip... 


Install IC-8 near RN-3 (also looks like а 
3-lead transistor), observing the proper 
polarity of the 3 leads. The rounded side 
faces RN-3. Snip... 


It’s decision time now; the moment of — 
reckoning is at hand. You have to decide 
the course of the rest of your scanner's 
life: internal or external installation. 


Г help. The next few pages present a 
standard wiring scheme for whichever - 
way you decide. Those pages offer insight 
to the final steps of the: connection of the 
CE-232 PC board to the scanner, and 
either way, the concepts are similar. 


Step R waits for you to make up your 
mind. Just consider these next few pages 
before jumping. 


STANDARDIZED WIRING SCHEMES 


The first years of distribution of the CE-232 
taught us several lessons, the first of which is 
that our instructions are good. Most hackers are 
successful the first time out. 


But there have been a few problems that stand 
out in our notes, and they will be shared with 
you. These errors occur in the wiring and point- 
to-point connections. 


The first four editions of the Interface and 
Manual left the wiring up to the backer, and for 
most that was sufficient but a few had trouble. 


This procedure will standardize point-to-point 
wiring to reduce errors during installation. 
Regarding the CE-232 Wiring Plan. Tables 8-2 
and 8-3, you may disregard if you see fit. 


If you stick to it and run into trouble, I will be 
better prepared to assist with remedia] measures; 
call it "both playing to the same sheet of music." 


Whether you choose to instal! your CE-232 
inside the scanner or in a metal project box, at 
leaast 19 wires are to be connected between the 
scanner and the CE-232 printed circuit board. 


That's a lot of wires to keep track of, and to trace 
down later if/when something doesn't work. 
Actually, there's not much to say about internal 
installations except that the color codes T 


recommend will help keep things consistent — if 
you will adhere to them. If you won't, then wire 
up one point at a time and one wire at a time, 
making sure that each wire originates and 
terminates at the right places. Also, tag each wire 
(in lieu of color code) so you can troubleshoot if 
necessary. 


When questions are thrown at me, 1 am much 
friendlier when I find your compliance with 
standardized wiring procedure. 


USE STANDARD PARTS 


External installations can make it tough to track 
things, which ts where our CE-232 Wiring Plan 
shines. It's standardized. 


The first step 15 to use female DB-25 connectors, 
one mounted on the rear panel of the scanner and 
the other on the rear panel of the CE-232 box. 
This allows interconnection with a cheap and 
commonly available shielded parallel cable, with 
male DB-25 connectors on each end, cost of 
which is about $10 anywhere. Do NOT under 
any circumstances, use "ribbon cable" for remote 
installations, and preferably not for internal 
installations, either. 


PROCEDURE 


Now that the cable question 1s out of the way, the 
rest is a Jot easier. Before you physically mount 
the female DB-25 connectors on the scanner and 
meta] project box, you'll be wise to lay the two 
loose female connectors side by side and prewire 
each one so they're exactly alike in color codes. 


Each wire bundle can be cut and trimmed to the 
approximate correct length after mounting the 
connectors. Then, when you instal] the DB-25's, 
mount them so the SPARE unused pins face up 
and are accessible for future use. 


After the DB-25's are installed, then and only 
then, route and solder the wires to their 
respective termination points. 


ALTERNATIVE ONE 


If the idea of installing DB-25 connectors doesn't 
appeal to you, there is another way to keep things 
smart and still simple. Buy two shielded 25- 
conductor parallel cables, one with male DB-25 
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on each end and the other with female DB-25's Now slip a cut female cable into one of the holes, 
on each end. After that, it's almost intuitive. cut off excess cable. strip enough of the 
insulation for the individual wires to flare out and 


Lay aside the one with the male DB-25; it will be go to their respective termination points. 


your interconnecung cable later. Now cut the 


female cable a certain distance from each end to Make a note of color codes: one color for each 
have enough length to use as “pigtails.” CE-232 Wire or Point, and use the same color 
That is, you'll drill a 7," hole in the back of the | Code at each end to keep things straight. 
scanner and another іл the back of the CE-232 ГІ show you , and you can choose. 

project box. Look at Table 8-2. 


Figure 8-6: Wiring the computer to the scanner 


25-cond, shielded 3 
parallei cable Mate DB-25's on cable 
Female DB-25's on chass 
вава 08-25'5 are 
rear view of lemale 


Ns = 
06500005606 
оовообофооова 


SCANNER 


Point Н is assigned to 


DB-25, Pin 14 to carry «12v from the scanner to 
the CE-232 Board. Sae the "Standardized CE-232 
Winng Plan" tor the rest of the pin assignments. 


*»12 votts 
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Table 8-2: The Standardized CE-232 Wiring Plan 


Wiring from CE-232 Box or PC Board to Terminations in Scanner 
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СЕ-232 Wire Color Termination Points 
DB-25 СЕ-232 Codes for Inside Inside the Scanner, or 
Pin No Wire/Point .D. СЕ-232 Box/Sconner Notes & Function 
—— o. a. PRO-2008/6 | PRO-2004- Pin No 
1---------- —Z ------——---—----——- White и Row-4 CN-501 | CN-502 — Pin 12 
2 Y MMÁMMMeIBlackWhite--------------- =e Row 3 CN-501 | CN-502 — Pin 11 
мм“ Brown/White----------------——-—-- Row 2 CN-501) CN.502 — Pin 10 
Д MM nmMÁ MM Gray/White------------—-----——-- Row 1 CN-504 | CN-502 — Pin 9 
5-—-——--———-\/ --—--—-———--——- Green/White -------------——----- — Column! CN-501 | CN-502 — Pin 8 
б—-----—-— —Ш--—-—-—---—---—- Blue/White -----------------»--------- Column 2 CN-501 | CN-502 — Pin 7 
2 ---——-- Tresen Viole/White ----------------------—-- Column 3 CN-501 | CN-502 — Pin 6 
8 а $— mmm Tan/Orange —----——-—-—----—---- Column 4 CN-501 | CN-$02 — Pin 5 
9---------—-—-Ң --——------——-----———- Yellow/Orange ----------------—---- Column 5 CN-501 | CN-502 — Pin 4 
10 --------------Q --—------—--------- Orange/White--------------------——. Column 6 CN-501 | CN-502 — Pin 3 
11----——————----Р—-—-——-—-—————- PinkWhite-—--—----—---—--—----- Column 7 CN-501 | CN-502 — Pin 2 
12 --------—---- K -—-——--—-—--—-- Tan —----------------.-----------—--  CS- Chip Select ------------------ CPU 
13 ---—-——-— © ---------------------- Red/White ---------------------------- Column 8 CN-50] 1 CN-502 — Pin 1 
14-------—--- Н = Red -—-----------------<—----------5—- +12 to +14 volis, DC 
E RENE m spare 
16 -------------- ИИИ — spare 
17--————----—--] ----——--—-————---- Gray ee SI - Serial Data. ---—--——----— CPU 
18-——----------—-______ -—-——-—-—-— ---—---—-----—-- spare 
19---——--------- M-~~~-------—- — Blue ---+-----------—__-—_----— ~  SQ-Squeich --------------—----- CPU 
ee e——2 000000 em euo spare 
2] --------—---~ DD (1) --~-------- —— Yellow (Demo of a User Switch) -- — User Switch У: Beep Vol: DD(2) ground 
22 -------------- JJ-----------~--------— Green (Demo of a Status Input)--- — Status Input 6: Squelch Break Indicator 
23-—---————-1, -——--—--—--—---—- Violet --------------------------------- C/D - Command Data -----------CPU 
24 --------—---- = BLOWN р =  SCK-Serial Clock -------------- СРО 
25 —---------+-- N -----—---——----- Black/Yellow ------------------------ GND - Ground CN-50t ]CN-502— Pin 13 
Wiring Between the CE-232 DB-9 Input Jack and the CE-232 PC Board 
D8-9 CE-232 Wiring 
Pin # Wire/Point 0 ID Color Codes Notes/Function 
е iti leit: . Bare Jumper... No Connect to CE-232 
2> --—-------- В ———-— M .. »GREEN ененнен енене лесс 2 Хр - Receive Data 
3» А -—----- PINK -----———-———---------------------- —>TxD - Transmit Data 
Дф. Е. Bare Дитретг....................................../о Connect to CE-232 
5> ----------- G -~----------—------- >Black/Orange -------------------------- >PC Ground to CE-232 
6 e „р... .... Bare Јатрег................. а No Connect to CE-232 
7 ... -none vee No Connection oii No Connect to CE-232 
8 • us vo Bate Jumper... No Connect to CE-232 
9... none No Connection .......... esses No Connect to CE-232 
NOTES: The unused User Switches (AA, BB, CC) can be wired to any of the above SPARE pins on the DB-25 
connector, if and when you necd them. 
The 8 OUTBYTE, 8 INBYTE and five of ihe six INPUT STATUS registers are not wired to anything. | 
These functions are up to you to implemen and use as desired. Sec Manual i 


Status Input (JJ) goes 10 ІС-2. Pin 13 in the scanner through a 4.7-КО !imiter/safety resistor 
User Switch (DD) shewn here is used to turn the BEEP on and off [i wires stcaight thru to the BEEP 
line: (PRO-2005/6 is CN-3, Pin 8) (PRO-2004 is CN-$, Pin 7). Use CTRLAF4 for Or/Off. 
e Pins 1,4,6,8 are jumpered, but go nowhere, 
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Interesting views of cobbled-up scanners. Can you tell which are prototypes (my fault) 
and which were sent to me for "help?" 


A massive assault on a PRO-2006. The bottom are of the 2004/5/7 and the 2033 can be stuffed! Shown 


here, left to right, are: Remote Control. Extended Delay. LED Center Tune and S-Meter, and a computer 
interface! Note the DB-9 connector where the AC cord once entered the chassis. And there's stil! room for 
more down there... 


[ome 


x LANE 


A PRO-2004 with 6,400-channel Extended Memory and Keyboard 
Memory Block Controller. Old-style SRAM, but stil] works? 


Figure 8-7: Connectors and cables 


| CONNECTORS & CABLES 

Rear (soiderpin; view | 
of femals DB-25 ous AE oss 
PES noo WIRE TERMINATION POINTS Point or 


ОЛОК CODE DESCRIPTION PRO-2005/6 | PRO-2004 Wire LD. 
WHITE ——— Row-4—— — CN.501 | CN-502 Pin 12 


ee КЕ +12 vols, DC R229 | R-235 
BLACK/WHITE Row. 3———— CN-501 | CN-502 Pin 11 


Spare 
BROWN /WHITE —————— Row-2—————————— CN-501 | CN-502 Pin 10 
— Spore 
GRAY/WHITE———— —— — Row- | CN-50! | CN-502 Pin 9 


GRAY Si - Serial Dato CPU: see instructions 

GREEN/WHITE——————- Column |——————— CN-501 | CN-502 Pin 8 
Spare 

BLUE/WHITE—— — —— Column 2——— ——— CN-501 | CN-502Pin 7 

BLUE ———————— — SG - Squelch CPU: see instructions 


MOLET/WHITE— — — — Column 3———— CN-501 | CN-502 Pin 6 
————————$рае 


< = 


ч zc 


TAN/ORANGE————— — — — Column 4—————CN- 501 | CN-502 Pin 5 
YELLOW — — — — — — — —— Beep Vol: CTRL+F4—CN-3, Pin 8 | CN-504 Pin 
YELLOW/ORANGE———————- Column 5 ——————— CN-501 | CN-502 Pin 4 
GREEN Status Input 6: SquelchlC-2, Pin 13 via 4.7-k 
ORANGE/WHITE—— — — Column 6—————— CN-501 | CN-502 Pin 3 
VIOLET ——— — — СЮ - Comnd Dato— CPU: see instructions 
PINKAVHITE ————————- Column 7——————— CN-501 | CN-502 Pin 2 
BROWN ———— — ——— SCK - Serial CIK———— CPU: see instructions 
TAN ————————— CS - Chip Select CPU: see instructions 
BLACK/YELLOW—— — ——— ОМО” - Ground ——— CN-501 | CN-502Pia 13 
REO/WHITE ————————— Column $—————— CN-501 | CN-502Pin ! 


Отк оъ Ф љю 9 


Solder a short, bore wire from Pin-25 
to the 08-25 metal shell to improve ground. 
7 


СЕ-232 Воага 


f Siroight-Ihro serial cable 
f. with female 08-9 on end 


/ 


Y y io / 


© Hthru DD |. 
& 1) «T 


Rear View of the 
male 08-9 
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Figure 8-8: CE-232 board, assembled — two views 


ea CES eS, 


Examine these illustrations, which show component location and orientation. Note the liberal use of pin- 
line connections to increase flexibility and permit quick disconnect. etc. 


STANDARD CE-232 WIRING PLAN 


The final steps of this section help you connect a 
wiring harness to the CE-232 board. How that's 
done depends on your choice of installation, 
internal or external. No matter which way, the 
preferred starting point is to install a pin-line 
Socket strip at each group of Input/Output Points 


on the CE-232 board so that the female sockets are 


exposed. 


This facilitates making your own connectors for 
the CE-232 board using identical pin-Jine sockets 
as on the board, with the male plugs exposed and 
wires soldered to the female sockets. They mate 
perfectly and allow for quick connects and 
disconnects. See Figure 8-7. 


YOUR CHOICE 


If you don't understand this concept, or don't 
want to bother with it, then go ahead and solder 
wires to each In/Out point. Refer to the wiring 
guides and diagrams. 


The wire length should be kept to а ininimum for 
your choice of installation. For instance, if the 
CE-232 is installed inside the scannei, the wire 
bundle from the board to the destination points 
should be kept short consistent with neatness and 
ease of routing. 


For extemal installations, the wiring will consist 
of two phases: 


(1) wiring the I/O points on the CE-232 to a DB- 
25 connector installed on the metal box, and 


(2) wiring a DB-25 connector on the back of the 
scanner to its termination points in the scanner. 


In either case, choice of wire 1s critical. Do not use 
the stiff, single or mulu-strand hookup wire from 
Radio Shack. Ribbon cable is not recommended. 
The best choice is to pull the color-coded wires 
from Radio Shack's "25-conductor LAN cable.” 
#278-776, if you can find some. 


WIRING, CONTINUED 


Review the wiring layout shown in Figures 8-4 
and 8-6, and study Table 8-2 before performing 
Steps R - Y. The guide provides some alternative 
ideas, and you must make a commitment one way 
or the other. 


No matter which installation you choose, Steps 
R- Y аге a guide only. 


R. Solder wires A, B, and G to their respective 
termination points or pin-line piugs. 

Solder wires J. I, and K to their respective 
teriminatton points or pim- hne plugs. 


к) 
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T. Solder wires M and L to their respective 
termination points or pin-line plugs. 


U. Solder wires H and N to their respective 
termination points or pin-line plugs. 


V. Solder wires O, P. Q, and R to their respective 
termination points or pin-line plugs. 


W. Solder wires S, T, U, and V to their respective 
termination points or pin-line plugs. 


X. Solder wires W, X, Y, and Z to their 
respective termination points or pin-line plugs. 


Y. Solder wires АА. BB, CC, and DD to their 
respective termination points or pin-Jine plugs. 


Z. Solder wire JJ to its respective termination 
points or pin-line plug. 


АА. Install all IC's in their sockets now - IC] and 
ICs 4-7 first. 


BB.The pins of these IC's are probably spread a 
little too far apart to fit your sockets. Grasp the 
ends of each chip's body between your 
thumbs and forefingers with the pins away 
from you and lay the chip against a flat, hard 
surface. 


Pushing downward, force the chip body 
toward the bottom row of pins lying on the flat 
surface. This will cause the row of pins to 
flatten a little. 


Flip the chip over and repeat the procedure to 
the other row of pins. Then compare the pin 
alignment with the pins of its socket. If they 
match, press the chip into the socket, ensuring 
proper orientation of pin #1. Repeat this 
procedure for all five IC's: 1. 4, 5, 6, and 7. 


CC.CAREFULLY unwrap the foil packaging 
from the Microprocessor Chip, IC-3. Avoid 
touching its pins on the perimeter (sides) of 
the chip. Hold it between thumb and 
forefinger on its top and bottom, not the sides. 


Facing the TOP side of the chip, look for one 
of the four corners that has a uny flat corner 
instead of a sharp one. This flattened corner 
must mate with the corresponding flattened 
corner of the leadless chip carrier socket on the 
CE-232 board. The flattened corner of the chip 
will be next to the crystal, X-1. 


DD Carefully lay the microprocessor chip into the 
open area of the chip socket, but don't force it 
in, just lay it there so that it rests with the 
flattened corners aligned. Jiggle the chip a little 
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with something like a small screwdriver so 
that it settles into the chip carrier socket 
slightly. It won't actually go all the way in 
because of back pressure from the pins of both 
the socket and the chip. Just make it lie in the 
opening as flat as possible, with all pins 
aligned. 


EE. Now grasp the CE-232 board with the four 
fingers of each hand on the bottom of the 
board and your two thumbs resting on the top 
of the microprocessor chip. 


Begin exerting an even pressure on the top of 
the chip to force it down into the chip cartier 
socket. 


Be gentle at first, ensuring that the chip 
remains relatively flat. Increase pressure 
gradually, watching the chip as it is pressed 
into the socket. 


If one edge of the chip suddenly drops in a 
little more than its opposite side, then exert 
more pressure on the opposite side to even 
things up again. Avoid a "bending" pressure 
on the chip. 


FF.In this manner, with careful application of 
force, the chip will "pop" down into the chip 
carrier socket. Continue applying increasing 
pressure until the microprocessor seats solidly 
into the carrier and can go no farther. 


Examine the chip carefully with respect to the 
camier. 


When properly seated, the top surface of the 
uP chip will be about 0.5 to 1 mm below the 
top edge of the carrier socket. 


GG. Use a good light and magnifier to inspect ali 
pins of the MPU to ensure that none got 
crumpled or torqued out of alignment. 


There are two 1/8" holes on the standard PCB 
boards, for the purpose of pushing out the MPU 
chip from the bottom, if ever necessary. 


Radio Shack now sells the proper extraction tool: 
38276-2101. which is a better way to remove the 
MPU. 


This concludes the basic fabrication and assembly 
of the CE-232 Printed Circuit Board. 


At this tire, inspect ALL your work, and 
especially the solder-side of the board, with a 
strong light and a good magnifier. 
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Inspect for solder blobs, bridges, and unsanitary- 
looking solder joints. Correct all problems and 
investigate all suspicious [ooking oddities. When 
you are sure your work is perfect, go have a cup 
of coffee. 


When you come back. check it thoroughly yet one 
more time, and only then proceed to the following 
Instructions. 


INSTALLATION INSTRUCTIONS 


Study aii the wiring diagrams and rilüstrations to 
develop а good understanding of the big picture 


Select a COM tsertal) port (COM?! or СОМ2) on 
vour PC io drive the CE-232. Acquire a standard. 
хлор serial cable with the appropriate 
connector on one end that mates wiih your PC's 
COM port. The other end should have a fernale 
DB-9 to mate with the male DB-9 input connector 
on the CE-232. 


Determine whether your CE-232 Installation will 
be intemal or external. We suggest external for a 
variety of good reasons including ease of 
maintenance and installation, and the fact that an 
external CE-232 can be used to drive other 
scanners, too, provided they are appropriately 
wired. One at a time, of course. 


If you choosc an internal installation that's fine, 
but you can be on your own here since the Job is 
mostly mechanical (see Chapter 4). Just follow the 
wiring diagrams and pictorials and read the 
remainder of this section, which is geared for 
external installations, but which will also be 
applicable in terms of wiring between the CE-232 
and scanner. 


POWER SUPPLY REVISITED 


This is my last chance to convince you to take an 
important step. It will open space for future 
modifications, improve scanner reliability, and 
more. Please do it! 


Regardless of how you install the CE-232: 
REMOVE THE POWER TRANSFORMER, T- 
801, and power your scanner with a source of 
external DC to the coaxial power plug on the rear 
of the scanner. 


External power wil) let the scanner run much 
cooler and thereby preserve its life. If you remove 
T-801, you'll have plenty of room in which to 
mount the CE-232. The suggested external power 


source should be rated at 12V (9 500mA at à 
minimum with 12V @ ІА preferred. The 
following Radio Shack power supplies and 
AC/DC adapters will work just fine with the 
PRO-2004/5/6: 4422-120. 822-127, and 273- 
1653. WARNING: Radio Shack's 4273-1652 
has been found to be inadequate, despite its specs. 


You could use the A/C power cord and a removed 
Т-801 in the design of your own external power 
supply. T- 801 heats up the гем of the scanner, 
and that’s not good De something about it 


PRO-2004 ONLY (internal) 


The CE-232 board can fit in the PRO-200) quite 
handily. on the back of the keyboard pane!. Velcro 
strips wil! hold it there Just fine. Another 
possibility is in the area just forward of the power 
transformer, on either the top or the bottom of the 
scanner. 


If you insist on retaining an internal supply, it may 
be useful to move the power transformer, up or 
down and/or to the REAR slightly, to make more 
room. 


Т-801 is mounted to the chassis side wall with 
two locking nuts and bolts, so drilling two more 
holes is all that's needed to move it a little. 


Again, I suggest you remove T-801 entirely and 
power the scanner from an external DC supply. 


PRO-2005 and PRO-2006 ONLY 
(Internal) 


Space 1s very limited in these rigs and you need a 
lot of it for other modifications and gizmos, so I 
strongly urge an external installation of the CE- 
232. If you insist on keeping it internal, there are 
two possibilities. 


One is to move T-801 a bit up or down and to the 
rear to make space for the CE-232 on the side 
opposite the direction in which you move T-801. 
T-801 is mounted to the chassis side wall with 
two locking nuts and bolts, so drilling two more 
holes is all that's needed to move it somewhat. 


Again, we suggest you remove T-801 entirely, 
and power the scanner with externa] DC. 


Another possibility is on top of the two small 
shielded compartments just behind the keyboard 
on the top right side of the scanner. That's where I 
install 'em. 
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A very thin tayer of imsufanon should be placed on | plastic will do nicely. You might also scope the 


the top of these iwo compartments and/or on the bottom area of the scanner over that large cutout in 
bottom of the CE-232 board. Clear acetate will do, | the metal chassis. As [ said, possibilities are 
or any thin plastic. Beware: snipped solder joints limited. 


on the bottom of the CE-232 board are very sharp 


and can penetrate plastic. You decide, but keep in mind the likely future 


need for maintenance, modifications, and general 
I have done manv of these. however, and a layer access. 
of acetate with Velcro between the CE-232 and the 


Figure 8-9: CE-232 internal installation guide 
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See text and connection 
diagrams for your scanner 


INTERNAL INSTALLATIONS 


. Build CE-232 Board 

. Install a mole DB-9 on rear of sconner 

Moke a wiring harness for CE-232 Board: A, B, G, H-Z, DD, JJ 

. Instoll CE-232 Board somewhere in scanner 

. Fabricate and mount the 74HC4050 Buffer circuit 

Fobricate and mount the diode/resistor group to keyboard connector 
Connect 5 wires to Points 1-М on sconner's Logic/CPU Board 
Connect Wires !-M from sconner's Logic/CPU Board to Buffer os shown 
. Connect CE-232 Wires O-Z to diode/resistor group as shown 

. Connect CE-232 Wires I-M to Buffer as shown 

. Finish wiring: Buffer -- 5v, CE-232 + 12v, grounds, etc. 


© о сосы О оь CON — 


-— 
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CONNECTIONS 


If you choose an internal installation, a male DB-9 
connector should be mounted on the rear of the 
scanner and wired as previously shown to points 
A, B, and G on the CE-232. Examine Figure 8-9. 


The rest of the points on the CE-232 will be 
terminated within the scanner at places discussed 
just ahead and in the specific sections for your 
scanner. 


The remainder of the installation involves point to 
point wiring for the most part. Most of the rest of 
this discussion will be focused on external 
installations, but the basic principles — and the 
actual connections (what point connects to what) — 
will apply to internals as well. 


Fabricate a short multi-conductor wire bundle for 
the CE-232's Input-Output points. ( You might 
have done this in Steps P-Y) А minimum of 
nineteen (19) wires are needed here. 


Cut the cable to desired length for whichever 
installation you choose: if external, then long 
enough to go from the CE-232 board to the DB-25 
connector; if internal, then long enough to go from 
the CE-232 board to the termination points in the 
Scanner, 


EXTERNAL INSTALLATION 


Install the CE-232 in a suitable Project Box —metal 
(for shielding) is strongly suggested. The CE-232 
board can be mounted on two or four metal 
standoffs in the box. 


Install the CE-232's DB-9 connector on the back 
panel of the Project Box. Install the CE-232's DB- 
25 connector on the back panel of the Project Box. 


Refer to the CE-232 Scanner/Computer Interface 
Schematic Diagram (Figure 8-3), the Component 
Location Diagram (Figure 8-4), and the Wiring 
Plan from CE-232 board to Scanner (Figure 8-70) 
as guides to the designated wiring points on the 
CE-232 board. 


Use a VOM/DVM (or wire color codes) to keep 
track of which wire is used at any given point. 


Make a record of pin numbers and color codes. 
Solder or bolt the ground wires N and G on the 
CE-232 board to the box's chassis. 


Install a prewired female DB25 connector on the 
back panel of the scanner. 


PRO-2004 — PRO-2005 — PRO-2006 
DIFFERENCES 


While the PRO-2004/5/6 are all pretty much the 
same scanner (electronically), there are mechanical 
differences among them, notably their logic- 
display boards. 


The PRO-2004's logic-CPU board is all by itself 
on the bottom of the main chassis, well away from 
the separate display board tucked inside the front 
panel. The PRO-2005 and PRO-2006 are alike 
with a single logic-CPU-display board mounted 
inside the front panel. 


The PRO-2005/6's logic-display board is installed 
vertically in the front panel, and that can be very 
intimidating to those who don't know how to get 
it out. It's not глаг difficult, and ГЇЇ guide you 
through it. 


Meanwhile, since the PRO-2004 differs from the 
PRO-2005/6. they will be discussed separately. 
Watch for the header titles that apply to your 
scanner. 


PHO-2004, PRO-2005, and PRO-2006 


These specific wiring instructions are for the 
PRO-2005/6, followed by those for the 
PRO-2004. The instructions for each calls for 
some splicing, or soldering wires to other wires. 
This is largely for simplicity of verbiage. and you 
can (and should) devise your own scheme with 
pin-line connectors wherever that helps connecting 
one wire to another. 


If you must solder the wires directly use good 
splicing techniques, including a bit of heat shrink 
tubing inserted over one of the wires before it is 
soldered to the other one. The heat shrink tubing 
is pulled over the solder joint and heated briefly 
with a heat gun or butane lighter until it shrinks 
down tightly to insulate the connection. DON'T 
USE TAPE! 


] recommend the mini-connector technique, and 
one wav this can be done is by use of break-apart 
pin-line sockets. You'll need two strips of 25 to 
make one 25-pin male/female combination. 


You may have better ideas, depending on what's 
available in your area. Just don't use large 
jack/plug combinations because space is cramped 
and you need room not only for the CE-232 but 
also for other modifications in the future. 
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Therefore, use proper splicing techniques if other 
ideas fail you and if you dont like my pin-line 
socket idea. Splicing is a good technique for all- 
round use, with the singular lability that quick- 
disconnects/re-connects are not possible. 


PRO-2005 and PRO-2006 ONLY 
FRONT PANEL DISASSEMBLY 


NOTE: Cable connectors and ground 
straps should be disconnected from the 
main Circuit board and chassis, not from 
the logic/CPU board. 


|. Disconnect the PRO-2005/6 from main 
power. Remove the internal Memory Retention 
Battery. Remove the top and bottom cases from 
the chassis. 


2. Disconnect all wires and cable bundles that go 
from the front pane} assembly to the main 
circuit board. There are six (6) cable bundles 
and connectors to be disconnected from the top 
side of the scanner. and one cable bundle and 
connector on the bottom side of the scanner. 


Disconnect the two ground straps that go from 
the logic/CPU board to the bottom side of the 
scanner chassis. 


3. Remove 4 (2 on each side) countersunk 
machine screws from the sides of the front 
pane) that secure it to the main chassis. Gently, 
pull the front panel assembly away from the 
chassis until it’s free. 


4, Desolder the bare ground wire from the chrome 


metal shield that goes to the area by the VOL 
control and push this wire out of the way 
towards the VOL and SQUELCH controls. 


5. Remove the six small screws that secure the 


logic/CPU/display board to the front panel. 


6. Face the inside of the front panel as it is placed 


in an upright position, and locate the white, 13- 
pin connector (CN-501) at the upper left corner 
of the printed circuit board. 


This connector doesn’t have any wires and 
doesn't look like a connector at first, but that's 
what it is. Insert a small flat blade screwdriver 
under the edge of that connector and gently pry 
upward. 


The entire logic/CPU/display board should then 
slip up, away from the plastic front panel and 
come loose in your hands. Handle it by its 
edges and be very careful, but don't let 
paranoia make a critical error. 


CN-501 is a female connector for 13 long 
pins (CN-601) that protrude up from the 
keyboard panel underneath, where you 
can't see it easily. 


Friction grips the CN-601 male pins tightly 
in CN-501, but the logic/display board 
separates easily enough from these pins. 


Use caution and protect those connectors! 
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Figure 8-10: CE-232 external installation 
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EXTERNAL INSTALLATIONS 


. Build CE-232 Boord 

. Install prewired mole DB? ond female D8-25 on metal box 

. Connect 08-25 wiring horness to CE-232 Board: A, 8, б, H-Z, DD, JJ 
. Mount CE-232 Board in metal box 

. Install prawired female 08-25 on reor of scanner 

. Fabricate ond mount the 74НС4050 Buffer circuit in scanner 

. Fabricate and mount the diode/resistor group to keyboard connector 
. Connect 5 wires to Points -M on scanners Logic/CPU Board REAR PANEL OF CE-252 


Connect Wires 1-М from scanner’s Logic/CPU Board to Buffer as shown 
Connect prewired 08-25 Wires O-Z to diode/resisior group os shown 


. Connect prewired DB-25 Wires I-M to Buffer as shown 
. Finish wiring: Butter +5v, CE-232 + 12v, grounds, etc. 
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Figure 8-11: Details of connection points on PRO-2005/6 logic board 


This is an inside {backaide) wew of the PRO-2005/6 
Logic/CPU Board. It has to be removed from the 
front panel to see this view and to make the required 
connections as shown below. Refer to the detailed 
instructions on front panel removal. 


Refer to the magnilied insats for exor) locolioos 
of connection роп} for Wires |, J, K, L, & M. 
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HOOKUP TO THE CE-232 


7. Refer to the pictorial for the PRO-2005/6 logic- 
display PCB. Figure 8-11, and solder 5 short 
(6") color-coded wires to the back side of the 
logic-display board to points Е, J. K, L. and M, 
as shown in the pictorial. Make writien notes of 
which wire goes to what point. You don't want 
to forget what went where, so a drawing 
should go into your notebook. 


8. Flip the logic-display board over so that the 
side with the chrome meta! shield is exposed. 
Solder the anodes (unbanded ends) of 8 silicon 
switching diodes ( 1N914/1N4148) to the 
solder pads for pins 1 through 8 of СМ№-501. 
Solder a short wire (2") to pins 9. 10, 11, and 
12 of CN-501. Dress up the 8 diodes and these 
4 wires so they point up and out from the board 
and clip the ends so that all 8 diodes and 4 
wires are of equal length. About 1/4" of 
cathode lead on the diodes will be about right. 


NOTE: You can solder in a 13-pin 
strip pin-line socket to the 13 holes just 
beneath CN-501, so the female side is 
exposed. 


Then prepare a mating 13-pin male strip to 
plug into that permanently soldered female 
strip. The 8 diodes and 4 short wires can be 
soldered to the removable "plug." 


9. Replace the logic-display board back into the 
front panel, being observant of the 13 male 
pins on the keyboard that have to be lined with 
CN-501. Press the logic-display board partly 
down onto these 13 pins and then dress and 
route the newly-installed 5 wires over the 
bottom edge of the board so that they are free 


10. 


and accessible. Press down on CN-501 again 
until the logic-display board solidly seats in the 
front panel. 


You might have to jiggle the board a little to 
work the SOUND SQUELCH and 
DIMMER/LIGHT switches through their holes 
in the panel. Replace and tighten the 6 Phillips 
Screws. 


Resolder the bare ground wire near the 
VOLUME and SQUELCH controls back to 
the chrome meta? shield, taking great care to 
see that it does not short against one of the 
lugs of the VOLUME Control. Reinstall the 
front panel to the scanner chassis. Plug in all 
previously removed connectors. 


‚ Solder the 5 wires I, J , K, L, and M from the 


logic-display board to their corresponding 
wires in the parallel cable. Solder Wire N of 
the paralle] cable to the chrome metal shield of 
the logic-display board (Ground). Solder Wire 
H to the left end of R-229 as you face the front 
panel of the PRO-2005/6. 


NOTE: Use of the 74HC4050 buffer is 
optional but highly recommended for 
internal installations; it is mandatory for 
external installations. 


. Identify and separate Wires O through Z from 


the bundle out the parallel cable. Refer to 
Figures 8-10 and 8-11 and solder Wire O to 
the cathode of D-1 (at pin 1 of CN-501). 


Complete the wiring to the 7 remaining diodes 
and 4 short wires as shown in the diagrams 
and pictorials. 


This completes the PRO-2005/6 detail section. 
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Figure 8-12: PRO-2005/6 74HC4050 buffer connections 
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PRO-2004/5/6... PROTECTION 


I have recommended an external installation 
because it has so many advantages, but I waited 
till now to tell you about the single electrical 
disadvantage. In this case, the pluses outnumber 
the minus by a huge margin. But, the minus has to 
be taken care of because it’s a potential killer. 


The CPU needs an electrically clean environment. 
If you do an external installation for the CE-232, 
you need a simple little circuit to protect the 
scanner’s CPU from external noise, spikes, and 
static generated by nearby or connected hardware. 


Since the CE-232 connects directly to the CPU at 
several points (I, J, K. L, and M), the CPU is 
susceptible to being zapped. 


Provided with my Kit is a 74HC4050 High Speed 
CMOS Hex Non-Inverting Buffer, а 16-pin DIP 
standard IC. If you're rolling your own, get one. 


The 74HC4050 isolates outputs from inputs and 
still clean]y transfers signals. Up to six signal 
lines can be protected with one 74HC4050. You 
will need a piece of perf board on which to mount 
the chip and a 16 pin DIP IC socket. 


This little board is installed in the scanner near 
where Wires I-M terminate at the logic/CPU 
board. The closer the better. 


PROCEDURE 


Build the protection circuit on a tiny piece of perf 
board — I use a piece that’s 8 holes by 10 holes 
with pin-line sockets for the chip's inputs and 
outputs to make connections easier and to aid 
troubleshooting when required. 


Use an IC socket to avoid direct soldering of the 
chip. 


Loop a stiff copper wire (18 gauge) through two 
holes in one corner nearest pins 7 and 8 of the 
74HC4050 and bend/pinch and solder the loop so 
that it is tight and about ! inch of the copper wire 
protrudes away from the perf board. 


Solder pins 7 and 8 of the 74HC4050 to this 
ground wire. 


Solder this 1" stiff copper wire to any chassis or 
PCB ground in the scanner near where Wires I-M 
from the CE-232 terminate. This wíre not only 
serves as à ground, but also as a mount. 


The idea is to install the 74HC4050 buffer circuit 
close to the scanner's logic/CPU board. 


Connect the wire from Point “I” on the scanner's 
logic/CPU board to pin 3 of the 74HC4050. 
Connect the Wire "I" that goes out to the CE-232 
to pin 2 of the 74HC4050. 


Repeat this procedure as shown above for 
Wires/Points J, K, L, and M as shown in Figure 
8-12. Connect pin ! of the 74HC4050 to a source 
of regulated +5V, as shown in Figures 8-12 and 
8-14. 


PRO-2004 ONLY 
You guys have it easier in some ways. 


Disconnect just CN-501 from the left-rear corner 
of the logic-CPU board. Now, remove the seven 
screws that hold the logic-CPU board to the main 
chassis. Gently, flip this subassembly up and over 
toward the front of the scanner so you can work 
on the bottom side. You do not need to remove 
any other connectors. 


Refer to the Installation Guide just ahead to see 
where to make your solder connections. 18 of the 
required 19 wires go to easy spots on this board, 
so relax and do the job carefully. 


Fabricate and mount the simple 74HC4050 Buffer 
assembly you built onto that small perf board. 


Solder 4 short wires from each of the solder pads 
for CN-505, pins 5, 6, 7, and 9, to the Input pins 
of the 74HC4050 Buffer, 3, 5, 9, and 11, 
respectively. 


Study this 11-рїп connector carefully from the top 
first, so that you can identify its eleven solder 
pads. At first glance, pin | doesn't look like a pin 
pad. 


Make sure you can identify pin Pads 5, 6, 7, and 
9 before soldering. Pin 1 doesn't look like pin 1 
from the bottom, but you can tell by looking from 
the top. 


Solder a short wire from pin 9 of CN-504 to 
Buffer Input pin 15. Easy enough. Again, make 
sure you correctly identify CN-504, pin 9. 


Solder the anodes (unmarked ends) of 8 diodes, 
D1-D8, to CN-502, pins 1-8. Clip the anode leads 
to about 1/4" before soldering. 


Correctly identify CN-502, pins 1-8. Then solder 
the four 47kQ resistors, one each to CN-502, pins 
9-12. The free ends of these resistors go to 
ground. 
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Figure 8-13: PRO-2005/6 main PCB - source of +12V for CE-232 


Enner end of 
R-229 offers 
+12.бу, but the 
right end is best. 


FRONT EDGE OF PRO-2005/6 MAIN RECEIVER BOARD 


Solder 5 short wires (2") to CN-502, pins 

9-13. Dress up the 8 diodes and these 5 wires so 
they point out from the board and clip the ends so 
that all 8 diodes and 5 wires are of equal length. 
About 1/4" of cathode lead on the diodes will be 
about right. 


Make a diagram of the pinout or coding of these 
19 wires so you don't have to remove this board 
again, and then reinstall} the logic-CPU board 
back onto the chassis standoffs and replace the 7 
screws. Reconnect CN-501. 


NOTE: You can be slick at this point and 
solder in a 13-pin strip pin-line socket to 
the 13-solder pads of CN-502 so that the 
female side is exposed. 


Then prepare a mating 13-pin male strip to plug 
into that permanently-soldered female strip. The 8 
diodes and 4 short wires can then be soldered to 
the removable "plug;" a "pro" flourish here. 


The socket can be superglued to the board, and 
hot-glued for strength after checkout. 
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PRO-2004 CONTINUED connectors to the chassis/frames of the scanner 


Solder Wire H from the CE-232 board to the and any eternal Metak boxes, 
exposed end of R-235 on the top-rear of the main Point N on the CE-232 board should also be 
board. See Figure 8-14 for the location of R-235. connected to the chassis or frame in which it is 


: . mounted. 
It's a good idea to solder or bolt a ground wire 


from the metal shells of any DB-9 or DB-26 


Figure 8-15: PRO-2004 key locations — note 74HC4050 buffer 


13-pin PinLine Strip 


CN-504  superglued to edge of board CN-501 


74HC4050 Buffer 
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Figure 8-16: Connections to logic/CPU board 


PinLine Strips can be super-glued Bottom of 4050 Buffer 
1o edge of boord. Bottom view here. Boord barely visible 
М 
R-4 R.5 N. CN-504 CN-505 
Ground M "memi 
D^ x 
СЕ232 

O 0-1 

P D-2 

Q D3 

R D4 

S D-5 

T D-6 

U D7 

ү D-8 

W 

Х ; 

E NOTE: 

N Pinline sockets at CN-504/5 are not 


needed. Route short wires from СМ504 
3 Pins 5,6,7 & 9 directly to the inputs of 
Grounds ý the Buffer at Pins 3, 5, 10 and 12 
Shee o respectively; CN-504, Pin 9 directly to 
Buffer at Pin 15. 


| 
Bottom vt Е 
do 13-pin Рале Strip All connections to the PRO-2004 
super-glued to edge are here on the Logic/CPU Board 
of Logic/CPU Board as shown except Point H 


and connected as shown to 
Pins 1-33 of bottom of CN-502 


Solder the five Output Points (1, J, K, L, and M) the cathode of D-1 (at pin 1 of CN-502). 
from the Buffer Circuit to their corresponding Complete the connection of Wires P-Z to the 
wires that go to the CE-232 board. seven remaining diodes and pins 9-12 of CN-502 


Identify and separaie Wires O through Z from the | 2° BROWN agran an рыр. 


bundle that comes from the CE-232 board. Refer This completes the portion of the project that 15 
to the diagrams and pictorials and solder Wire Ото | specific to the PRO-2004. 


Figure 8-17: Keyboard matrix wiring 


PRO-2005/6 


PC-4 
Keyboard PCB 


Located beneath the 
Logic/ CPU Board 


COL-1 COL2 COL3 COLA 


KEYBOARD MATRIX PCB (ALL) 


Figure 8-17, above, shows the stock PRO-2005/6 
Keyboard Matrix PCB and its associated male 
connector, CN-601. This information applies to 
the PRO-2004 also. 


The configuration is not easily understood until 
the logic-display board ts removed from the front 
panel for the work that must be done to it, at 
which time everything will become clear. 


Figure 8-18 shows how to connect the 13 wires 
from the CE-232 to CN-501. 


You can fabricate a connector to mechanically 
mate with CN-501 by soldering a J3-pin strip of 


This depiction is solely far the PRO-2005/6 
but the PHO-2004 resembles it exactly 
except for PC # and circuit symbol numbers. 


[1] 
[2] 
[4] 
[6] 
[9] 
id 
D 
E 
E 


pin-line sockets to the 13 plated-thru (unused) 
holes just behind С№-501. 


The males of another 13-pin pin-line strip will 
then mate with the exposed females of the 
previously soldered pin-line strip. 


The diodes and resistors can be soldered to the 
removable strip for a convenient quick-disconnect 
arrangement, and it keeps the board looking neat. 


A bit of the chrome metal shield over that end of 
the logic-display board has to be “nibbled” away 
to make more room for the new connector. Watch 
any sharp edges, and look out for metal filings. 
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Figure 8-18: CE-232 to CN-501 wiring details 
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WHAT IF YOU RUN INTO TROUBLE? 


You won't, if you follow my instructions to the 
letter. But, to quote CE-232 Murphy... ^anything 
that goes will probably be inaccessible." Keep 
your dynamite handy. 


If you encounter trouble. it will be due either to a 
fasted component or to an error on your part. 11 
help with a bit of guidance, and the first thing you 
need is an understanding of how the CE-232 
functions. Let's walk through the circuit... 


1. IC-8 accepts a range of +8 to +16V input and 
generates a regulated, steady 45V to power the 
СЕ-232. 


2. The computer sends data or control signals to 
the CE-232 down Wire "A". The CE-232 
sends data back to the computer on Wire "B". 
Wire "С" is the common or ground between 
the two. 


ІС-1 is a dual RS-232 receiver transmitter 
that lets your PC and the CE-232's 
microprocessor. IC-5. "talk" to each other. 


3. The СЕ-232 receives data from the scanner оп 
Wires I-M, with Wire N the common or 
ground (same as Wire G) 


Wires I-M have nothing to do with data or 
control signals sent to the scanner. 


S Use the 13 emply holes lor connections! 


Note: 01.08 & R4.&7 eliminate "noise’ ond 
kev-input probiems ic the scanner Irom 
О beth the PC and the scanner Keybecrd 
which con oe caused by 'engthy Wires O-Z 
Deweer the sconner'^ keyboard connector 
cad the CE-Z32 Please understand that 
CE232 these согпропеп} scive ONLY problems 
Board | inbound :o the scanner; NOT outbound 
in scanner rom me scanner, D1.8 and R4-7 ore 
or mondantory Not shown here, the 
external | 74HC4050 Buffer circuit for Wires IJ, K, L, 
& M, 15 an optional problem solver for 
internal installations and mondantory for 
external installotions of the СЁ.232 


Cable length between CE-232 and scanner 
may still be limited by problems that can 
result from lengthy Wires IM, which corey 
data outbound from the scanner to the PC 
These will be different problems and will 
have different symptoms discussed 
elsewhere in this Manual. 


ZN<XKECCAYNYADH 


4. The CE-232’s MPU sends data to and/or 
controls the scanner via IC-4, 5, and 6 and 
Wires O-Z with Wire N as common or ground, 
IC-4, 5, and 6 and Wires O-Z have nothing to 
do with what the scanner sends to the PC. 


5. 1C-3, the MPU, processes both data from the 
scanner as wel! as data or control signals io the 
scanner. 


6. IC-2 won't let the MPU operate until DC power 
has stabilized after turn-on. The CE-232 will 
not operate till pins 1 and 2 of IC-2 are stable at 
25V, + 0.15 V. 


7. IC-7 is the User Switch Bank and is controlled 
by the MPU independently of everything else. 


Whether or not everything works, this information 
will help you understand the unit. If you do have 
problems, this will help you define them when 
you seek help or troubleshoot on your own. 


TROUBLESHOOTING 


The CE-232 Interface has different circuits and 
signal flow paths. of which one 1s the Scanner 
Control section and another, Data Acquisition. 


Trouble is less likely in the data acquisition side 
than in the contro} side, but it is Important that you 
understand each physical path to avoid wild goose 
chases. 
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DATA ACQUISITION SIDE 


Data Acquisition is the opposite of the “scanner 
control" that electronically presses the scanner's 
keys, from the AutoProgram or Keyboard Control 
functions. 


Data Acquisition reads and processes the 
scanner's LCD data for replication on your 
monitor. It also acquires and processes scanner 
data for AutoLogging, LookUp, and Birdie Reject 
functions as well as for portions of the Script 
function. 


The Scanner Control section consists of one half 
of IC-1, portions of IC-3, and most of IC-4, 5, 
and 6. Scanner control begins in the computer 
with signals sent to the CE-232 via Wire/Point 
"AD. 

Those signals are coded into MPU format by IC-1 
(pin 13) and sent to the MPU from pin 12. The 
MPU (1C-3) processes control signals and 
operates IC-4, 5, and 6 to emulate keypresses on 
the scanner's keyboard via Wires/Points O 
through Z. The CE-232 Scanner Control section is 
shown in detail in Figure 8-16. 


Figure 8-19: Scanner Control section 


А 


L 
i Dota Acquisition problems are usually in 


i the senal cable, 08-9, or 1C. 1soldering 


TA ACQUISITION SIGNAL PATH 
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Data Acquisition begins in the scanner with 
sampling of display, clock, and squelch activity 
data at Points I, J, K. L, and M on the scanner’s 
logic/CPU board. 


The data are buffered (copied and isolated) and 
passed through our protective 74HC4050 Buffer 
and fed directly to the CE-232's MPU at pins 31, 
32, 33, 39, and 42. 


The MPU continuously processes the scanner data 
and transfers it out pin 29 to IC-1. pin 11 where 
the data are encoded into computer format and 
outputted as RS-232 serial data from pin 14 
through Point “B” into the serial cable and on to 
your computer's COMI or COM? ports. 


The Data Acquisition section is neither 
complicated nor trouble-prone and does not need 
further treatment here. 


Figure 8-19 depicts the signal paths that were 
described above. It is useful to know something 
about them in the event your CE-232 ever 
develops problems. 


и, KL& M | 459.1104 
: 74HC4050 : 
: Buffer : 
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IN CASE OF (SERIOUS) DIFFICULTY 


Many HB-232’s and CE-232's have gone into 
service since August, 1991, when the first few 
were Beta tested. All bugs and glitches have since 
been worked out of the design. and the software is 
quite robust and not buggy. 

If your CE-232 fails to perform properly, 
you will waste a lot of time with an attitude of “7 


checked everything three times.” You simply have 
to check everything a fourth ume. 


Or more - because the problem is in the execution 
or in à part failure, but not in the design. 


About the only realistic possibility of a problem not 
within your responsibility will be a defective part. 


PREPARING FOR TROUBLESHOOTING 
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There are no known instances of this having 
occurred, but I suppose it could happen. 


One fellow told us he replaced X-} (8MH2z crystal) 
with a new one and it worked. We don't know if he 
damaged the original or 1f 1t was defective from the 
factory. There have been very few cases of user- 
damaged parts. so components are not the primary 
focus for problem resolution. 


On the other hand, after providing Technical 
Support for nearly three years, I do know 
something of where problems occur in those rare 
cases when it happens. 


Let me give you the benefit of that experience. 


Resistance and voltage measurements are of limited value when the problem is a wiring error, but voltage 
measurements at the test points are often informative. You should record these measurements for future 
reference, whether or not you have a problem at the beginning, and then use that information if a problem 


comes up in the future. Fill out and retain Table 8-3. 


Table 8-3: Test results — your record 


Attach the BLACK (-) lead of a voitmeter to any РСВ ground or TP-1. Measure the voltage at each of the test points and record the results below. 


Nominal 
Or Typical 


«| Location 


TP-3 * 11v 


B 
р|в-с | 16v :03v 


РЯ 


ЛЬѕоіше value is not as important as is the difference from (В) with 1. бу difference being typical. See (D) 


1. Subtract (C) from (B) and record the difference in (D) 

2. Divide (D) by R-2 (100-0hms); multiply by 1000 and write the result іп (F). This applies Ohm's Law 
to caiculate current drawn by the CE-232. tf the calculation is not less than 10-ma, nor more than 
20-ma, there will not be a serious problem with the unit. if greater than 25-ma, shut off power 
immediately and troubleshoot the problem. NOTE: R-2 can burn out under current greater than 50-ma. 
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Table 8-4: Trouble history — learning from the mistakes of our fellow scannists 


The assigned number tells you sometbing about history, and therefore the likelihood of a specific area 
causing a problem 

0 2 No problem history at all... 

I = Rare 

2 2 Occasional 

3 = More frequent 


PROBLEMS AT THE PC, OR BETWEEN PC and CE-232: (avg) 


1 
Defective or incorrectly configured COM! ог COM2 port on the PC I 
Defective or incorrect type of serial cable 2 


Reversed wires or errors in wires A, B, and/or G ] 

Incorrect installation of the software ] 

Misunderstanding of how to operate the software 2 
PROBLEMS ON THE CE-232 BOARD: (avg) 


2 
Wires soldered to the wrong spots on the printed circuit board 2 
Cold or defective solder joints on the printed circuit board 2 
Reversed/swapped parts on the printed circuit board ] 
Solder blobs/short circuits/open circuits on printed circuít board 2 
Defective part on the printed circuit board due to User error l 
Defective part 0 
Reverse installed IC's 2 
Reverse installed polarized capacitors or resistor networks (RN1-4) ] 


Defective wiring of connectors 


Í 
Defective or incorrect type of cable 0 
| 
Broken wire 1 


PROBLEMS INSIDE THE SCANNER 3 (avg) 
Keyboard Connector Installation 2 (avg) 


Reversed polarity diodes, D1-8 
Defective diodes (if from Radio Shack) 
R4-7 installation errors 
Wiring errors, Wires/Points O thru 7, 
Logic/CPU Board Wiring errors 
Wires/Points I thru M 
74HC4050 Buffer errors 
DC Power 
Wire H error 
Wire N Error 
Scanner failures associated with CE-232 Installation (errors) 
Due to CE-232 (does not impact or alter scanner’s performance) 


(avg) 
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TIPS - HINTS - IDEAS FOR 
TROUBLESHOOTING 


Startup problems wii! usually be caused by one or 
more of the following. Check each carefully. 


solder-blobs and bridges between pins and 
traces (short-circuits) 


cold solder joints (opewintermitrent circuits) 
reversed wires, wires soldered to wrong spots 
erroneous component installation, location 


incorrect polarity {+ and —) of diodes and 
electrolytic capacitors 


improper pin alignment of the integrated 
circuits, IC sockets, and resistor networks. 


Double and triple check for correct soldering and 
parts locations on both sides of the CE-232 board 
BEFORE you install it in the metal box or 
scanner. If you just give the board a casual 
“eyeball” before installing it, then STOP HERE! 
GO BACK. DO IT RIGHT. 


You need a strong light and magnifier to properly 
check the soldering of the CE-232 board. Solder 
joints should be bright, shiny, and smooth in 
appearance. It's easy to get solder bridges 
between those tightly spaced IC pins. You must 
not take your work for granted, even if you think 
you're ап expert. 


The microprocessor chip socket, if installed 
wrong, will get the chip in wrong — and м wi// 
blow! Check all other IC's for proper installation 
on the board, also. It's easy to get 'em bass- 
ackwards. I know. I’m the guy who has fixed a 
boatload of these where the only problem was a 
reversed chip. 


LIKELY WIRING ERRORS, AND 
DIAGNOSTICS 


The greatest potential for error wili be the wiring 
of the CE-232 to the scanner. There are at least 19 
output wires, and any could be miswired to the 
wrong spot or cress-wired, either on the CE-232 
board. or at the termination points in the scanner. 


if some keyboard functions work fron: the 
compures, bul net others. you will find a pair of 
reversed wires ii tbe G-Z group, probably one m 
the О-У group asd ene in the W-Z group. А quick 


study of the scanner's Keyboard Matrix Diagram 
in Figures 8-17 and 8-18 may disclose which 
pair(s) may have been reversed. 


For instance, if PRGM, ENTER, and CLEAR 
along with MANUAL, PRIORITY, LIMIT, 1, 2, 
and 3 don't work, you'll find wires R and W to be 
reversed. 


If all functions “happen,” but two or more don't 
work according to the specified keypresses, then 
you have one or more miswired pairs in the range 
of O-V or W-Z, but not both às would be the case 
if some functions worked and others didn't. For 
example, if pressing PRGM, ENTER, or CLEAR 
results in functions L/O RVW, RESET, or 
MONITOR, it's obvious that wires R and V are 
reversed. 


If there is no computer keyboard control of the 
scanner but the Monitor gives a faithfu) 
reproduction of what's going on in the scanner, 
then an error or defective solder joint could exist 
in the vicinity of IC-6. 


Also. be sure the INPUTS to the CE-232 are 
properly connected between the DB-9 connector 
and the CE-232 board. This includes the jumper 
between pins 1, 4, 6. and 8 on the DB-9 which do 
NOT go to the CE-232 board. 


Pins 7 and 9 of the DB-9 have no connection at 
all. Pin 3 goes to Point À, pin 2 goes to Point B, 
and pin 5 goes to any ground Point G or N on the 
CE-232. 


Other variables include the quality and type of 
your serial cable and/or your COM port. The serial 
cable must be the “straight-thru” variety, not a 
null-modem cable. If your cable is a null-modem 
type, you can invert it back to the straight-thru 
type with a "null modem adapter," commonly 
available at all computer outlets and Radio Shack. 


А null-modem adapter on a null-modem cable 
turns it back into a "straight-thru" cable. If all else 
fails and you're just not sure of what kind of serial 
cable you have, try a null-modem adapter, just for 
the hell of it. 


Now let's look at your COM port, which could be 
faulty. Cheaper serial VO cards and old computers 
are sometimes only marginallv capable of thc 
9600-bps serial data speed that's required by the 
CE-232 to heen pace with the scanner. 

The bottom line 15 that vour sena! port. serial 
сае, and serial input (DB-9? wning to the CE- 
232 must be proper. | would ехрес C OM roit 


problems to be more common with some of the el- 
cheapo or oláer PC/compatbies, 
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A few hackers sent us the chips from their CE-232 
Kits to test when nothing eise at their end seamed 
te point to a solution. їп мохе cases. the chips 
proved okay. Two users out of hundreds manages 
to zap their MPU chips IC 34. баай discharge. 
Inestiv likely, 


t . se 44.76 
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OUTPUT STATUS window in the upper-left of 
the computer's display to see that the zeroes 
change to l's and back to 0’s as the switches are 
operated. This test affirms the ability of the CE- 
232 and its MPU to respond to PC keyboard 
commands in general. И does not test the status of 
IC-7 itself, nor the status of your interconnecting 
wiring other than Wires A, B, and G 


3. Test IC-7 and the User Switches 


Connect the leads of an ohmmeter to Wires AA. 
High (almost infinite) resistance should be noted if 
User Switch #1 is OFF. Press Ctrl+F1 once, at 
which ume the resistance should go low, down to 
35-80 ohms or so. Press Ctrl+F} again, and the 
resistance should go back high. This test can be 
repeated for Wires BB, CC, and DD (Ctrl F2-F4) 
to test the integrity of IC-7. This test proves up the 
status of IC-7 and the ability of the CE-232 and its 
MPU to respond to PC keyboard commands in 
general. 


User Switch errors are limited to Wires А, B, G, 
AA thru DD, and/or IC-7, only. Proper operation 
of the User Switches conclusively proves two- 
wav communications between the computer and 
the CE-232. If other aspects of the CE-232 do not 
work. this is strongly suggestive of errors in your 
work. 


NOTE: This test can be used to check the status 
of IC-4, 5, and 6, by plugging these chips into the 
socket for IC-7 and repeaung the above tests. 


4. Test the Data Acquisition síde 


Observe the display of the scanners LCD 
functions on the Monitor. Tf the display on the 
Monitor is a faithful) reproduction of the scanner's 
LCD, then Wires I, J, K, L, and M are proved 
good and the data acquisition mode is proved 
good. 


You can go on to test the AutoLogger, LookUp, 
and BirdieReject functions if you like, but these 
tests are not necessary at this time, 


Erratic or improper display in the Monitor is 
suggestive of errors associated with Wires I, J, К, 
L, and/or M, and/or the 74HC4050 buffer. 


$. Test the CE-232 Scanner Control 
Circuit 

Operate all the 29 normal scanner key functions 
from the keyboard of vour PC. For instance, 
press MANUAL : SCAN : MANUAL. Does the 
scanner go into Manual mode, followed by Scan, 
and then Manual again? 
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Test al! 29 scanner key functions in this manner. 
Make a table of those that work and those that do 
not. I like this sequence of keypresses: <M>anual 
: 1234 : «M»anual (Error) : «Backspace (Clear)» : 
<M>anual : 5678 : «M»anual (Error) <Backspace 
(Clear)» : «M»anual : 9000 : «M»anual (Error) 
«Backspace (Сіеаг)> : <S>can followed by all 
other functions. 


Problems with operation of the scanner from the 
computer keyboard when everything else is okay 
suggests faults or errors associated with Wires or 
Points O-Z, diodes D1-D8, resistors R4-R7, 
and/or IC-4, 5, and 6. You may as well verify 
proper voltage of +5V on pins 14 of each of IC-4, 
5, 6. and 7, and IC- 1, pin 16. An incorrect 
voltage at any of these supply pins may suggest a 
defective solder joint or PCB trace problem. 


Since IC-4, 5, 6, and 7 are the same kind of chip, 
you can use the above test for IC-7 and the User 
Switches to check IC-4, 5, and 6 by swapping 
them around with IC-7, and repeating the AA-DD 
resistance checks. 


6. Software installation and operation 
probiems 


This 15 a different animal altogether. The best 
checks and tests are to simply follow the 
directions for installation and operation of the CE- 
232 program and reinstall or continue working 
with it any number of times unti] you get it rigbt. 


We have observed that some Users are unfamiliar 
with the MS-DOS operating systern, especially 
with hard and floppy disks and directory and 
subdirectory concepts. 


Unfortunately, my job is not to teach you how to 
use your computer and I can't go to lengths over 
this kind of problem. Learning how to operate 
your computer and how to work under MS-DOS 
is your job and that's where it will stay. This is 
not to say that 1 won't help, because I will, but at 
my convenience and time. You can bet that I don't 
have the time to teach computing by mail. 


But if you can work a BBS and send e-mail, then 
you know your way around the computer well 
enough to get help. 


RESISTANCE AND CONTINUITY 
CHECKS _ АШ ч 
There isn't much else that сап be dynamically 


tested. If all else fails at this point, the next logical 
step is to perform relevant point-to-point 
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continuity checks with an ohmmeter. This method 
can be used to detect faulty solder joints and 
wire/trace paths, if close visual inspection doesn't 
arouse your suspicions. 


Here's an example: Note in Figure 8-3 that there 
1$ а direct connection between and among IC-4, 5, 
and 6, pins 1, 3, 8, and 10. If you were to put one 
lead of a VOM on pin | of IC-4, on top at the 
chip, you should measure virtually zero resistance 
10: ІС-4, pins 3, 8, and 10 

IC 5, pins 1, 3, 8, апа 10 

IC-6, pins І, 3, 8, and 10. 


If a measurement of more than 1€) 15 detected. 
that's a sign of trouble somewhere. You can 
perform a lot of continuity tests using Figure 8-3 
as a "roadmap." Just make sure all power to the 
CE-232 is off before doing resistance/continuity 
measurements. 


TEST EQUIPMENT TIP 


Here's a little tip for your VOM: use the kind of 
test leads that have alligator clips or “mini hook 
clips" on the business end. Get a large sewing 
needle, about 2-3" long, and wrap the eyelet end 
with tape to build up an insulated handle. Two 
pieces (with a gap for the alligator clip) of thin 
heat shrink tubing is even better, and let it extend 
to within a millimeter or so of the tip. 


The idea is to make a very slender and very sharp 


test probe for the RED (+) lead of the meter. Grip 
the alligator or hook clip to the body of the needle 
when making a measurement. Benefits are hard to 
describe, but they'll be clear after you use “fat” 

test probes that come with most meters nowadays. 


The sharp sewing needle allows entry into 
cramped areas to "dig" into solder spots and traces 
for quick tests. The thin insulated probe ensures 
that your test is “isolated,” and touches exactly the 
right spot and nothing else. 


Also, it's sharp and doesn't slide off the test 
points as easily as standard (blunt) test probes. 
Keep several of these "needle probes" handy. 


RUMINATIONS 


IC-5 cannot be tested and you really should not 
attempt to make any measurements at its pins. If | 
all else fails and vou think IC-3 has gone south, T | 
can test jt for you for a nominal shipping and 
handling charge. 
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Consider this a contingency to lean upon if you 
draw a blank on other options available to you. 
Statistically, one out of 500 Users may blow the 
MPU chip. Careful handling will reduce the risk. 


If diodes D!-8 are connected backwards, the unit 
will have no keyboard control of the scanner, but 
no harm will be done; just reverse them. If the 
electrolytic capacitors are installed backwards, 
chances are that they will be damaged. Radio 
Shack carries them. 


Unless you physically damage опе, it is most 
unlikely that the monolithic capacitors will ever 
fail. R-2 is subject to failure by overheating if the 
CE-232 circuit ever draws too much current. In 
this context, R-2 serves as a protective fuse for 
IC-8 and the CE-232 in genera], not to mention an 
easy way to calculate current drain. 


R-2 will probably burn up (and turn black) with а 
current above about 50mA. If R-2 ever burns up, 
something else will have caused it. Like R-2, R-1 
is unlikely to ever fail unless there's another 
problem somewhere else. 


Resistor nerworks, RN-1, 2, 3, and 4, wil] never 
fail unfess you do something that destroys them. 


A resistor network is internally like the drawing 
above. The resistor networks can be tested with an 
ohmmeter by measuring the resistance between 
pin | and each of the remaining pins in the 
network. See the diagram here for how they're 
laid out. 


Replacements can be done with conventional 
resistors instailed into the holes for pins 2, 3, 4, 
etc., and the upper leads al! soldered together and 
routed back to the hole for pin 1, as shown above. 


IDIOSYNCRASIES 
My 2006 won't AutoProgram... 


A few PRO-2006's have surfaced in which 
everything except the AutoProgram function 
works perfectly. Slower settings of the Gme 
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constant won't stop the "error" messages in the 
scanner's display. 


RELAX: There is an immediate and easy fix for 
this problem: use the 20045V13.PER file in the 
Basic Setup for the CE-232 Program. Just go 
back and redo your configurations. selecting the 
PRO-2004/5 setting instead of that for the PRO- 
2006. 


This problem is rare and we've not seen it on the 
bench, but some PRO-2006’'s are afflicted with 
this oddity. 


We suspect this phenomenon are caused by 
internal variances of devices within the scanner. 
which are not considered by the Program's 
2006V 13.PER file. So use the one for the PRO- 
2004/5 and you'll be all set with no handicap or 
limitations. 


In fact, scanners with this odd problem will 
AutoProgram somewhat faster under the 
2004/5V |] 3.PER file than "norma!" PRO-2006's 
with the standard setup. So except for the 
momentary adrenaline it's really an advantage. 


What if it won't stop? 


We've seen this problem in a few PRO-2004's, 
but it could appear in any. so I developed а sure- 
fire fix. 


The problem shows up in CE-232s that work 
perfectly in all respects. but the scanner won't 
STOP even on strong signals when in the SCAN 
or SEARCH modes. Yet. if vou MANUAL-step 
to à known signal. reception is just fine. 


The cause of this problem is an oddity associated 
with the cable or wiring between the CE-232 and 
the scanner. 


Tbe culprit will be found to be in the area of Wires 
I, J, K, L, and/or M. and can sometimes be 
alleviated by shortening or rerouting the wires 
between the scanner and the CE-232. But in a few 
cases, nothing longer than | foot works. 


We'd let it go at that. except that some people 
really need a longer cable tban that. 


For them, I designed a simple add-on circuit to 
permit any reasonable length and method of 
routing of the interconnect cable. to at least 6 feet 
or more. 


So take your choice: shorten the cable until it 
Works, or add a 74HC4050 buffer circuit for 
Wires I, J. К. L. and M as discussed earlier in 
this chapter. Install that buffer. anyway. if you 
know what's good for you and your scanner. 


TECHNICAL SUPPORT 


It’s costly when hobbyists do their own work and 
then need Tech Support. To control that expense. 

there are restrictions that I must impose. and they 

are not flexible. 


The most important 1s: absolutely no voice tech 
support whatsoever. The preferred method is to 
log on to my BBS (619) 578-9247 after 5:30pm 
and before 1:30pm, Pacific Time, where you will 
be guided to the forum for the CE-232. 


This forum has a nice backlog of tech support 
messages and support files, and is electronically 
networked to other BBS's around the world. 


IF you have read the backlog and did not find the 
information you need, ask for help! 


The bottom line is that I provide accurate and to- 
the-point suppon for the CE-232, but to get it you 
must help me do it cost-effectively. If you do. 
you re assured of my assistance if you need it. 


Now, please scan through Chapter 1 again. 


SPECIALIZED HELP RESOURCES: 
BBSs 


Regarding the HB-232, you can also reach me 
(and others who know a lot about the design and 
its operation) via the HB-232 message base on 
any of the following BBS's. 


Incidentally. most of these BBS's have some 
dedication to radio, so you may find them 
interesting for other reasons than just CE-232 
Tech Support. 


For instance. all carry my generic radio 
engineering and hacking conference called 
RADIO-TEK. 


That's where you can find answers to general 
technical questions about my books and their 
contents, and lively discussions of other things, 
100. 
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Table 8-5: BBS support for the CE-232 


Telephone ST City SySop BBS Name 
*619-578-9247 СА San Diego Bill Cheek Hertzian Intercept 
206-750-9703 WA Vancouver Leroy Pluard Powers Of Two 
315-425-5580 NY Syracuse Jim Bernier SBE Syracuse 
319-556-4536 IA Dubuque Pat Powers Tri-State Data Exchg 
319-583-6462 IA Dubuque Mike Donovan Spec-Com 
504-886-2157 LA Sun Nolan Lee WSTPC 
513-297-0250 OH Dayton Dan Hughes Intercept Technology 
619-278-7361 CA San Diego Brenda Donovan PRI Wildcat. BBS 
619-669-0385 СА Indian Springs Joe Nicholson The General Alarm 
810-478-4284 MI . Farmington Hills Pat Richard Enterprize 
816-627-6366 МО Kirksville Fotrest Joyner NEMO Wildcat. BBS 
908-245-6614 NJ Roselle Marv Shelton The Micro Room 
909-984-9580 CA Ontario Larry Files Teleterm Amiga West 
914-342-4585 NY | Wawayanda Steve Fleckenstein Red Onion Express 
916-577-4438 CA Lake Tahoe Frank Gaude HighSierra Online 
297-8-56851 Aruba Matividiri Gerardo Oduber Hack on The Beach 


* Hours of operation: 5:30pm-1:30pm, Pacific Time, weekdays, 24-hrs/weekends/holidays 


OPERATING THE CE-232 INTERFACE 


If you choose to write vour own software then 
you'll have to write operating instructions that 
comply with that software. If you use a third-party 
control program or the program that I supply. the 
operating ?nstrucuons wH! be on disk for vou 


Therefore, not much space is required nere бог 
азмтысной on operating the svsiem. bat ун we 
vot Пом a jew things t6 Р voi interes. à 


А = x 
vxo xeu Thos Yee HAS 
v RUE rae HUN gi SS 


The AutoProgrammer is Спо oF the strong suits tz 
the CE-232 because it takes the urudgery and 
errors out of your channe! programming. 
Basicaily. vou push а button. anc the compute: 
finds the file and loads it through the CE-232 into 
the scanner's memory. 


The AutoProgrammer file is a plain ASCII, 
comma-delimited, text file with the extension of 
‚АРЕ. 


Му home is near Miramar Naval Air Station. here 
in San Diego. That's the (former) home of Top 
Gun waining. Every year we have a truly maio 
military ar show. whick invariably features many 
historic airplanes and exhibits. 

k the Bue Anges Thes. ami Iho tg 


КЕИ 
Don ——! are EE 
TACK AMS, WIT пе что 
5 è 


pack fresuencies анс а so the 
teani. not to the Кусанов. TU s jun Usteping to hem 
as they rehearse and perform. With the CE-242 
Us more fun. 

Here is a portion of one of my *.APF files for 
the Blue Angels air team The file is called 
BLUEANGL.APF 


Computer Interfaces 195 


Table 8-6: BLUEANGL.APF 


Ground Support 


,161,121.900, ,D,,BRlue Angels - 

.162,123.400, ,D,,Blue Angels - Common Airshow 
,164,142.000, ,D,,Blue Angels - Maintenance Alfa 
,168,143.000, ,D,,Blue Angels - Maintenance Bravo 
,169,241.400,am,D,,Blue Angels - Air to Air Channel 
,160,250.800,am,D,,Blue Angels - Air to Air Channel 
,171,251.600,am,D,,Blue Angels - Demonstration 
,172,263.350,am,D,,Blue Angels - Flight Line common 
,174,275.350,am,D,,Blue Angels - Comm 1 Lead and Formation 
,175,302.100,am,D,,Blue Angels - Comm 2 Talkback 
,176,302.150,am,D,,Blue Angels - Comm 3 Solos 
,177,307.700,am,D,,Blue Angels - Comm 2 Formation talkback 
,179,360.400,am,D,,Blue Angels - Comm Solos 


(Yes, I know there are many more Blue Angel frequencies. This is a "portion.") 


The AutoProgram function allows the user to 
program the scanner's channels from a plain text 
file that’s been organized and structured to a 
specific format. 


When selected, a Dialog Box pops up to allow 
selection of the file. Choose the desired file by 
highhghting it and press Enter. If you change your 
mind and don't want to load a file just press ESC. 
Additional data may be requested depending upon 
the option selected. 


NOTE: The file must be a text file with data in the 
format shown below. The AutoProgrammer 
requires the delimiters (commas) to be present. 
The field sizes shown are maximum values. 


Table 8-7: APF and LOG file structure 


4 56 7 
Меде D L Ops 


2 3 
Freq 


Step Date 


a B C D Е|Е G 
12 3 9 з |1]1| 3 
<=- 
Commas distinguish one «----- 


field from the next <----- 


The AutoLogger generates text files in exactly the 
same format as required by the AutoProgrammer. 
so the description will арр!у to both: 


The first field is blank (not important here). 


The next sets channel 160 to be programmed with 
250.800MH2, AM mode, Delay set, no LockOut. 
and a brief description of the assignment. 


The AutoProgrammer ignores the description. 
Easy as 1-2-3 when you examine it, 


Tuble 8-7 shows the exact structure of an APF and 
LOG file, and descriptions of each element follow 
that. 


9 10 11 12 
Time Duration Anything 


I J K your data 

6 6 6 | 255 chars/line 

These fields, if sent to the ------- > 

CE-232, are ignored by the 
AutoProgrammer 
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Now, here's what that all means... 


А — Reserved field consisung of one character that 
is always Jogged blank by the AutoLogger. used 
by the AutoProgramming function only and can 
be up to 12 characters. 


B- Up to three characters (0-400) represents the 
channel # or search bank 8. 


C - This field is the frequency and consists of 
níne characters (Including the decimal point). 


eg: 1234.6755 (MHz) 


D - Receive Mode (WFM, NEM, АМ) – 
three characters 

E - Delay - (blank = delay off , "D" = delay 
on) - one character 

F - Lock-out - (blank = lockout off . “L” = 
lockout on) - one character 


The AutoProgrammer ignores everything after the 
6th comma or Field “F”. 


Table 8-8: Typical AutoLogger output 


The following fields are not used by the 
AutoProgrammer, but are generated by the 
AutoLogger. 


G – Op Mode - Scanner Operating Mode: three 
or four characters as shown below: 


SrUp -Search up 
SrDn - Search down 
Prgm - Program 
Man 
Scan 


- Manual 
~ Scan 


H - Step Size - one to four characters, 
including decimal: 12.5. 5. 50 or 30 (kHz) 


I- Date — six characters: Y YMMDD 


J — Start Time of signal — six characters — 24 
hour format: HHMMSS 


K — Duration Time of signal — six characters — 
24 hour format: HHMMSS 


Filter Chan Frequency Mode Dly L/O OpMde Step Date 


Time Duration 


283, 450.2875,nfm, , „Scan, ,950303, 164538, 000007, 

‚ 320, 173.3750,nfm, 4. „Scan, ,950303,164549,000006, 

s GL04 BST S9 MD ox y Scan, ,950303,164605,000014, 
306, 4557125 mf. , 45688. ,9520363,16462€,000010. 

Jun. Ue Em qoi . Scan, ,9595305,164641,2290009, 

p.d dut IMS SLOT pacar; ‚955301,16465*,000044. 
ы uq e RET Scar 950303.164750, 049005, 

jdm cade LE e ue en PEE DE SISSE OS 
usu p CI ‚ &САГ., Уул a GAA D ra D. 

NOTE: Мама sour frequenc: 14e ds in а database manager prograin. Most database 
pragrem- ае piperi and expert ита емей ASCH test filo, in the formals above. 
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MORE DOCUMENTATION — FREE! 


Gosh, there are a hundred other things I could tell 
you about that are in the documentation. The CE- 
232 documentation package is available for free 
download from my BBS. 


The downloadable doc file is CE232M AN.ZIP. 
For now, go back and review the features and 
functions of the CE-232 as described in the 
beginning of this section. 


Detailed operating instrucaons are available on the 
disk that 1 provide, and in the downloadable CE- 
232 file, and in the hard copy Manual. 


WHO ELSE SUPPORTS THE CE-232 
INTERFACE? 


PerCon Corporation supplies frequency data on 
CD-ROM and floppy disks straight from the 
FCC's records. Yeah, so do others (they say), but 
PerCon 15 unique. For one, their prices are low, 
and they are the prime contractor to the FCC to 
produce CD's, so you don't get any more direct 
than that. 


But the slickest thing of all is that most PerCon 
CD databases come with a function that produces 
CE-232 Autoprogrammet (*.APF) files, all ready 
to feed into your scanner, hands off. 


That's right! You need only query the master 
database for records of interest, and when the 
query is complete you press a button to have the 
records compiled into CE-232 Autoprogrammer 
format. Not only that, but these *.APF files are 
keyed to serve as the CE-232's LookUp files as 
well. 


What a package! 


PerCon offers a variety of products, one or more 
of which are probably tailored to meet your needs 
and the needs of your CE-222 Interface, including 
a full line of FCC frequency databases, ham and 
repeater, and FAA Frequency/Aircraft/Pilot and 
Airport Databases. Write or call: 


PerCon Corporation 

4906 Maple Springs/Ellery Rd 
Bemus Point, NY 14712 

Voice (716) 386-6015, fax 386-6013 


Intercept Technology makes the mother of all 
enhancements for the CE-232, a solid-state Voice 
Activated Digital Electronic Recorder, called 
VADER. Imagine, if you will. a tape recorder 
with no moving parts that records signals from 


your scanner as controlled by the intelligent 
CE-232 Interface. 


VADER works independently from the CE-232 
otherwise, but records a special log file just like 
the AutoLogger does, and synchronizes all 
recorded sound to this log file. VADER is better 
called an intercept analyzer. 


When your recording session is finished, you can 
play back the material as you would with a normal 
tape recorder, but there is much more. 


For instance, you can selectively play back by 
channel or frequency, skipping everything else. 
After an all-night recording session, you can 
actually follow the events and conversations in 
sequential order. You can play back hand-selected 
intercepts or automatically by channel, frequency, 
groupings of identical frequencies, time of day, 
and duration. 


VADER offers sound processing and convenient 
controls for instant lookup and playback, 
including repeats and partial repeats. There's a lot 
more, SO you've got to get the data sheet and 
brochure for yourself. 


VADER is basically "plug and play" and quite 
easy to instal] and set up. VADER is an AT-size 
plug-in board that works in most AT/compatible 
computers, 286 and up. Mine has worked well in 
а 386SX/16, 486DX/50. and in my Pentium. 
VADER’s secret is the 16 MB of low-cost on- 
board audio RAM that stores up to an hour's 
worth of continuous audio. 


This normally means several hours to several days 
of recording time, depending on the density of 
activity and the number of channels or bandwidth 
that you SCAN or SEARCH with VADER. 


The audio stored in VADER's memory can be 
transferred to your hard disk at any time, and can 
even be converted to *. WAV files for playback 
and processing through other multimedia 
accessories. Perhaps for sound enhancement? 


VADER will run (тот MS-DOS™, Windows™, 
or Windows 95™ and offers tremendous power to 
your monitoring capabilities. For more 
information, write to 

Intercept Technology 


74 Western Ave. 
Enon, OH 45323 


or log on to their BBS at (513) 297-0250. Detailed 
information is available in their BBS Conference 
Area #2 and you can download a demo VADER 
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file from File Area #1. Intercept Technology is a 
high tech company with a sideline in hobby radio. 


They cannot deal with casual hobby inquiries by 
voice phone, but once you're a customer, they'll 
do everything but fly out to your location to make 
sure you get up and running. Good guys there! 


If you use a Macintosh computer and are 
interested in the CE-232 Interface, there may be 
hope. While I don't know a Mac computer from a 
Mack truck, at least two Mac developers have 
produced software for the CE-232 and the Mac 
computer. 


If you want more information, send me a 
business-sized SASE with the incoming envelope 
clearly marked, “CE-232/Mac Info” and I will be 
happy to put you in touch with Mac people. 


You can also send me e-mail or log onto my BBS 
for the information. 


THIRD-PARTY PC SOFTWARE 


There are third party contro! IBM/PC programs 
for the CE-232, but either I have not been 
authorized to release their particulars, or their 
programs are still in the beta testing phases. 


The control program that I provide for the CE-232 
is very powerful and fully functional, but these 
other guys have worked to make theirs even 
better. You can log onto my BBS for the latest. 


IF YOU DON'T WANT TO 
ROLL YOUR OWN........ 


THIS SECTION WAS INTENDED AS A 
SERVICE, NOT AN ADVERTISEMENT. BUT 
YOU ARE AUTHORIZED TO BECOME 
INDIGNANT IF YOU MUST. 


The CE-232 15 available as a Kit of Parts, 

rogram Disk, and detailed Instruction Manual for 
the PRO-2004/5/6. Selected other scanners are 
also supported ai extra cost. 
The Basic Kit includes a printed circuit board, 
microprocessor with socket. 9 IC's, 4 resistor 
networks, ! crystal, 7 resistors. 8 diodes. 15 
capacitors, and a partridge im a pear tree. 


NOT supplied oe Computer, scanner, seria! 
cable. common jC sockets. Wiring. jugs, 
connectors, pin-Tine sockets. focus. solder, project 
box. and optional items. 


| 
| 
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The kit is functionally complete. Whether you use 
it or gather the parts yourself, the disciplines are 
the same. Assembly and installation require basic 
soldering skills, patience, and the ability to read 
and follow directions. 


Installation, whether in a project box or inside the 
scanner, is a mechanical task. The CE-232 has 
been beta-, gamma-, and market-tested by 
hundreds of hobbyists, from entry level to expert. 


Construction and installation typically requires 
6-12 hours. For a hobbyist, the best results are 
obtained if the work is broken into segments of 
2-3 hours each. 


IF YOU CAN’T FIND ALL ТИШ 
PARTS... 


But you still want to roll your own CE-232 
Interface, then you can get the most critical ones 
from me, independent from the kit offered above. 
There are only two parts that have been an 
occasional problem: IC-2 and IC-3. 


IC-2 is called an "Undervoltage Sensing Circuit," 
the purpose of which is to prevent the MPU (IC- 
3) from operating when the supply voltage is too 
low. This ts a critical part and cannot be 
substituted or eliminated. 


Part numbers known to be viable are the Motorola 
MC34064 and the Texas Instruments TL7757C. I 
don't know of others. The MPU is a Motorola 
68HCI IFIFN and there are no substitutes. A 
good independent source of either IC-2 or IC-3 is 
Future-Active Electronics, (800) 757-9438. 


If they are out of stock, and you can't find an 
alternative retailer, write, or call my BBS for a 
price. DigiKey Corporation is a reliable supplier 
of all the rest of the parts required for the CE-232. 


For that matter, you can get most of the resistors, 
capacitors, and connectors from Radio Shack. 
You can even special order most of the chips and 
the crystal from Radio Shack. 


If you prefer, I can usually provide one-stop 
shopping for almost anything уор’! ceed, but 
please understand that 1 am not a parts-house and 
cannot price-compete with the big guys. Please 
don't expect me to sell a chip for the same price as 


| the voripanv that sells à few thousand a month. 


| Therefore. 1 do nox provide common components 


on a piecemeal basis. Table 8-9 is a list of what f 
сет Sappiv, should you have sunnier problems, 
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Table 8-9: What I can provide... 


Item 
CE-232K1 
CE-232K2 
Program | 
Program2 
PCB 

IC-3 
XU-3 
IC-1 

IC-2 

ІС -4,5,6.7 
IC-8 

IC-9 
RN-1-4 
X-I 

К1-7 
Ci-15 
DI-8 
CE-DOC 
XU-).4-7 
1-1 

1-2 
W-] 
W-2 
Misc 


Description 
CE-232 Kit of Essential Parts. Program Disk. detailed Manual 

CE-232 Assembled/Tested Board, Program Disk, detailed Manual 

Current CE-232 program, and supporting files/docs: 3.5" disk 

Current CE-232 program, and supporting files/docs: 5.25" disk 
Etched/Printed Circuit Board, ready to assemble 

MC68HCI FIFN Microprocessor Unit 

PLCC 68-pin Leadless Chip Carrier (LCC) Socket for IC-3 

MAX232CPE or AD-232 RS-232 Receiver/Transmitter (I/O) 

TL7757C or MC34064P-5 Undervoltage Sensing IC 

74HC4066 Quad Bilateral Switch, 4 each 

781.05 Voltage Regulator. --5V @ 100mA, TO-92 

74HC4050 Hex Non-inverting Buffer 

Resistor Networks, 4 each 

Microprocessor Crystal, quartz, HC-18, 8MHz 

Resistors, all required. 7 each 

Capacitors, all required, 15 each 

Silicon switching diodes, 8 each 

The complete Assembly, Installation. and Operation Manual for the CE-232 
IC Socket Kit. | each, 16 pin DIP, and 4 each. 14 pin DIP, machine pin 
DB-9 jack. male 

DB-25 jack, female 

Serial cable. 9-cond, straight-thru, w/female DB-9 and your choice of other end 
Parallel cable, 25-cond, shielded, (DB-25 male)-to-(dB-25 male) 

Pin-jine sockets, strip of 16 (4-8 strips required) 


Contact me by BBS, FAX, e-mail, or U.S. Mail for a current price list. You can also call my 
business office for matters of this nature, with the understanding that I'm not available by phone 
and that the receptionist does not offer tech support of any kind. Here are the “contact” details 


once again: 


COMM tLronics Engineering 
World Scanner Report 

PO Box 262478 

San Diego, CA 92196-2478 


BBS/FAX (619) 578-9247, 5:30pm-1:30pm, Pacific 


Internet: bcheek @cts.com 
Compuserve: 74107,1176 
FidoNet: 1:202/731 


Voice admin: (619) 578-9247, 1:30pm-5:30pm, Pacific 
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Table 8-10: Resource List 


In no particular order of preference, the following companies are known to provide parts, 
materials, and other resources essential, useful, or supplementary to the CE-232 Interface: 


АП Electronics Corp....... PO BOX 567.................. Van Nuys c-a CA .. 91408 . (800) 826-5432 Parts/Materials 
СОММгопіс .............. PO Box 262478 ............. San Diego .......... СА ...92196.*(619) 578-9247 CE-232 Source 
Derf Electronics ............ 37 Plain Ауме................. New Rochelle...... NY ...10801.(800) 645-5030 Parts/Materials 
Digi-Key Corporation.....70] Brooks Ave So......... Thief River Falls.. MN...56701.(800) 344-4539 Parts/Materials 
Electronic Salvage Рагіѕ.. 706 Middle Country Rg .... Centereach ......... NY ...11720.(800) 645-5030 Parts/Materials 
Fordham Radio.............. 260 Motor Parkway......... Hauppauge.......... NY ...11788.(800) 645-9518 Test Equip/Tools 
Future- Active Electr........ 41 Main ${гее(............... Воцїол.............. MA...01740.(800) 757-9438 Parts/Materials 
Hosfelt Electronics, Inc...2700 Sunset Blvd ........... Steubenville....... ОН ...43952.(800) 524-6464 Parts/Materials 
Intercept Technology ..... 74 Western Аче. ............ EDOM мыгы Н estes ОН ...45323.#(513) 297-0250 Vader 

JameCo Electrontes........ 1355 Shoreway Rd.......... Belmont ............ CA ...94002.(415) 592-8097 Pacs/Materíals 
Jensen Electronic Tools ..7815 S. 46th Street..... ... Рһћоєтіх............. AZ....85040.(602) 968-6231 Tools/Supplies 
MCM Electronics .......... 858 E. Congress Park Dr... Centerville......... OH ...45459.(800) 543-4330 Parts/Materials 
Mouser Electronics ........ 2401 Hwy 287 No......... . Mansfield........... TX... 76063 .(800) 346-6873 Parts/Materials 
Newark Electronics ........ 5308 W. 124th ST .......... Alsip sss IL.... 60658.(312) 371-9000 Parts/Materials 
Parts Express [ninte ....... 40 E. First Street ...........- Dayton ............. OH ...45402.(800) 338-0531 Parts/Materials 
PerCon Сотр................ 4906 Maple Springs..... .. Bemus Pt. .......... NY ...14712.(716) 386-6015 FCC DB 

Tandy National Parts ...... 900 E. Northside Dr. ....... Ft. Wonh........... TX....76106 . (800) 442-2425 Parts/Svc Manuals 


* On ту BBS - Voice 1:30-5:30рт, Pacific Time. BBS/FAX all other times 


# BBS munber only — no voice 


IF YOU WANT TO WRITE YOUR OWN 
SOFTWARE... 


I'll help as much as possible. 


I can provide a "developer's toolkit." with the 
understanding that the original developer is no 
longer available for support. In a word, you're on 
your own if you write your own software for the 
CE-232 Interface. On the other hand, the price for 
the toolkit is "aght" (frees 


But it’s not that big a challenge... A number of 
third-party developers Rave successfully axed the 
topiki without comolar.. 

To gei this toolkit af no charge. contact т\с? on 


it) 


ihe BBS acc PH uivect vou to the Die. 


Good luck to you... and remember to share your 
insights with the other hobbyists who can benefit 
from your experience. А0. you may do a 
whizbang software package that really deserves to 
be shared with others... use my BBS for that. 


SO YOU'RE COMPUTERIZED NOW... 


Yes, now the nastiest part of our hobby is being 
done by a machine that doesn't know the meaning 
of the word "boring." 


Vour scanner will be programmed, 
ага your files will be maintained, 
automatically, by rhat ultimate 
ingredient of the Uliimate Scanner ~ 
the compurer! 


CONGRATULATIONS: 


— е 


ТАСПУЕСН | 


РОМ STUFF 


I'm sorta slipping one past you, but you're gonna love it? 


YOU DESERVE A BREAK TODAY! 


Hacking is fun. but now and then we hackers 
have to take time off "work" for a little relaxation 
and serious couch potato-ing. Patience be damned 
for this section. Rush or lag all you want; make all 
the mistakes you want, including downright 
stupid ones. In fact, this 15 a good section to 
unwind before turning on vour scanner. 


Relax; grab a steaming cup of Jamaican Blue 
Mountain estate coffee. a frosty barley pop, or 
maybe a big ol’ fat corned beef and anchovy 
sandwich. Put on your slippers, turn your 
soldering irons off. The most you’ll need here ts a 
calculator, pencil & paper, and a computer if you 
have one - and you should by now, right? 


There ts one thing, though... 


WHY? 


If you're serious enough about our hobby to be 

reading this book. then vou know that no matter 
how "ultimate" the hardware might become, you 
have to know what to do with it. 


Hence this chapter, where we'll pick up a bunch 
of loose ends. give you one or two basic tutorials. 
transmit a couple of remarkable tools. and talk 
about ways to really exploit your Ultimate 
Scanner. 


If all you want to do is boast about how many 
wires stick out of your store-bought PRO-9999, 
fine. If all you want to hear is your neighbor's 
baby monitor, or the local Highway Patrol, that's 
up to you. Skip this chapter unti) your interests 
evolve somewhat. 


However... 


If you really want to expand your honzons (in 

every sense, as you will soon see), and get the 
most out of that incredible machine into which 

you've poured so many hours and dollars, then 
this chapter was prepared just for you. 


TOOLS 


The tools of radio go far bevond voltmeters. 
soldering irons, and radio equipment. There's à 
whole boatload of stuff to fill the spaces behind 
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the scenes of radio above and beyond the mere 
flipping of a switch and listening to what's going 
on in the spectrum. 


Granted. some people are interested ONLY in 
flipping switches and maybe twisting a couple of 
knobs. You're probably not one of them, given 
that you're reading this hardcore book. 


Hacking and electronic experimenting are two 
distinct facets of radio that might clude the entry- 
level] knob twister. but there are more... oh, nny 
goodness, a lot more! A serious pursuit of the 
Ultimate Scanner dictates the addition of a few 
serious Cools to your warbag. apart from 
frequencies, antennas. and coax cable. I can't lay 
‘em all on you tn this single volume, but Jumpin’ 
Jehosephat. do І ever have a few goodies for you 
more serious types... stuff you might think is 
magic. It's not... but it works that way. 


UM start slow and easy for you green weenies, and 
then ГІЇ pop the eyeballs of even a few experts. 


ELECTRONIC FACTS, FIGURES, 
& FORMULAS 


ff you already know all this stuff, then beat it! Get 
outa here. Jump а few pages where I will knock 
the socks off of even the crustiest hackers. This 
first segment is for those who are a little green 


А. 


LK hate television. I hat 
.. can't stop eating peanu 


Vgl gi BL: cata RAVE! Pa RC "I бой жар EE memo 


Orson Well 


$5 xS 


around the gills and not sure of the difference 
between а resistor and a resister. This is a 
reference section for the kinds of things vou'd 
remember 1f they were used every day instead of 
just on Saturdays. Like me for instance... I keep a 
Hammer & Nail chan on the wall in one corner of 
mv shop. Ít shows the difference between the 
hammer and the nail. Ahem... you think vou have 
problems...? 


Immediately ahead is an electronic symbol chart 
for quick reference if you don't have a lot of 
experience following a schematic diagram. 
Electronic symbols are fairly universal. but don't 
get too hung up on my depictions of what's what. 
You may see others. J will try to stick to what's in 
the chart, though, It pretty much follows service 
manua) schematics, too, so you'll be okay for the 
most part. 


Next comes some basic electronics math, followed 
by a bit of advanced math and then a rousing 
crescendo. Check it out now or later. as suits your 
fancy, but don't omit it completely from your 
scanner training. It's good material. 


This section was designed to be monstrously 
rewarding in the long run but you can ignore it for 
a while without missing a Jick. You say you're 
ready now? Okay, break out your slide rule and 
abacus, and let's get to it. It's not all fun... there 
might be a little work in there, also. 


Fun Stuff 


Figure 9-1: Standard (more or less) electronic schematic symbols 
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ELEMENTARY ELECTRONICS MATH 


Let's learn Ohm's Law once and for all! It's a key 
ingredient of any electronic stew: 


Eve equals eeeeee over актуу 


2 апа Rem and E=IxR 
where: 

| = current, amperes, item, (sackful of electrons) 
E = voltage, volts, a force (pressure) 


R resistance, ohms, an obstacle, (friction) 


Ohm's Law — taken to a second level, is almost as 
simple as the previous one: 


P P 
Р = E XI and sir and dans 
where: 
P = Power, watts, energy (horsepower) 
2 P P 
Р= ГВ and R=- and = | 
1 Ё 
E a p 
Pet cS PxR and R = 4— 


Other useful formulas follow. They're worth 
noting because the technician working with radio 
frequency (RF) circuitry must refer to them 
frequently. 


inductive Reactance Capacitive Reactauce Resonant Frequency: 
X 2nFL Wo F= | 
aon "apc тля 


where: Xi = fnducuve reactance, ohms 
Х = Capacitive reactance, ohms 
L = Inductance, henries 
C = Capacitance, farads 
Fand Fo = Frequency, Hz 


LOGARITHMS 


Are logarithms a problem for you? Use this 
general solution as a reference and I'll try to 
clarify the issue: 


where we have the general form of В^=у 


then X = Log,Y 


10 =100 therefore 2-2 Log, 100 
2° =8 3= Log, 8 


Pronounced: “Tivo is the logarithm in the base 10 of 100. 
and three is the logarithm in the base 2 of 8." 


Examples: 


therefore 


The logarithm is a useful tool to the engineer 
because once the concept is learned, manipulation 
of even extremely complex numbers becomes both 
easier and faster. 


In particular, logarithms are important to the 
cornpleat scannist and dedicated hacker because of 
the all-important unit of measurement called the 
decibel. Decibels are logarithms and are very easy 
to handle and to understand — with just a little 
practice. A brief historical note here... 


The decibel is actually one-tenth of a Bel, a unit of 
measurement named after Alexander Graham Bell, 
best known for his invention of the telephone. 


In his day, however, Bell was widely known and 
acclaimed for his work with sound and the deaf. 
Nowadays, the decibel has become a standard unit 
throughout science, physics, and especially radio. 


Here we go: 


A LOGARITHM IS AN EXPONENT 


That's all... an exponent. Look at B*-Y again. X 
is the logarithm of Y to the base B. The most 
common base is 10. There are others, but we 
won't need them in this book. 


Unless specified differently, logarithms here are 
Logio which means “Logarithm to the base 10." 


Some Logs are easy to determine at a glance. Like 
“100” for instance. 100 = 10°. So the Log,, of 
[00 = 2. Easy! Log,, of 10 = 1 and Log, of 
10,000 = 4. Log, of 1.000,000 = 6. 


All those are easy. But what about this one: Log,, 
of 50 equals what? It is 1.698970004, that's 
what, (10'9997999:— 50). but how to find out? 


Weli, when Pua Pos м 2 
Paselsoluteona елдй w lacs БЕМА 
THONSUOUS 205 ААД ЕН 210093 ар 
AS OOF uide Аел а CCcnracy WRS nor poe 
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Nowadays you just enter? "SOT mo sou 
calculator. and Hit the LOG | кеу exa actly like I did 
to find the jogarithm of 50. i'm not sure 1 ever 
learned how to manually calculate a logarithm. or 
if I did. I forgot. Even mathematicians and 
engineers of the olden days did not manually 
calculate their logarithms. We looked them up in 
tables. 


We still do, but now those tables are embedded 
into most calculators and all computers. Use the 
LOG,, key on your calculator to find logarithms 
unless they're the easy ones. 


Here is a practical example for the use of 
logarithms to simplify a hairy calculation: 


Suppose you were given the opportunity to 
work for 31 days, earning a penny the first 
day, two cents on the second, four cents on the 
third, doubling each day. for 31-days? 


What would be your wages for the 31st day? 
That's easy: it’s 2°. 


A penny on the first day is 14, doubled to uds 
on the 2nd with 30 days to go: that’s 2? 


But who wants to sit there and luba out 
2<2х2х2х2... 30 times? A better way is to 
enter "2" into your calculator and hit the LOG 
key to see 0.301029996. Now multiply that 
logarithm of 2 by 30 to get: 9.030899871. 


We're almost there. 


That big number means 10? 0999". Tf that 
number is stil! in the display of your calculator, 
then just hit the 10* key on your calculator to 
get 1,073,741.827. 


Now remember ~ we're getting paid in 
pennies, so divide that by 100 to get dollars: 
$10,737,418.27 will be our wages on the 3151 
day of work. 


Yes, I will accept that deal! 
But you see my point here? 


Logarithms make calculation a lot easier. 
Logarithms are a Way of Life in electronics and 
radio, so you may as well pick up a working 
knowledge of their use. 


: 
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; A DECIBEL IS A RATIO 


That's all. a ratio — a comparison of one value ic 
another, both with the same unit of measurement. 


For instance, an amplifier with one-watt input, 
puts out 100 walls. The ratio of output power to 
input power is '”/, or simply, 100. Not watts. 
Not volts. Not apples. Just the pure, raw number 
of 100. 


Ratios are always pure numbers, with no units. 


A DECIBEL 15 A 
SPECIAL KIND OF RATIO 


With respect to the measurement and comparison 
of power (watts), 


dB= lOLog,, = 


2 


where P, is power, our or in, while Р, 15 power, 
їп or out, respectively. 


The amplifier gain example above would be 
calculated as follows: 


P 
dB =10Log,,— 
810 


2 


ge sialo 
dB - 10Log,,100 
dB =10(2) 

dB -20 


Therefore, it can be said that the amplifier has a 
“gain of 100," or better still, ^20dB. " Now, let's 
take it one step farther, but in the opposite 
direction: suppose I input 100 watts, but only 

1 watt comes out? 
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That ratio may be stated as '/ „ог 0.01. Using 
the above formula, we find the logarithm of 0.01 
js —2 and when multiplied by 10, we find a "gain 
of -20d B"... or better stated, “a 20dB loss.” 


Did you notice that the gain statement has a 
negative value while the loss statement has a 
positive value? 


Herein lies one of the secrets to understanding the 
decibel, and working with it! Keep the numbers 
positive as much as possible! You can legitimately 
do that provided that you think, talk. and write in 
terms of real gain and real Joss. 


Consider bow you'd be ten dollars richer if you 
lost a negative ten bucks! By the same token, 
you'd be ten dollars poorer if you gained a 
negative ten bucks! See how things can get 
confusing? 


Well. decibels can be greatly simplified bv 
working with them in such a manner as to avoid 
ihe use of negative numbers. So long as you think 
and labei your decibels appropriately as either gain 
or loss, ali chose dB expressions can be positive 
numbers! There аге times when you J] have to 
assign appropriate polarities in order to perform à 
calculation properly. but if vou think logically and 
get à bit of practice there should be no problem. 


For instance. suppose we have a svstem where the 
sum of all gains is 104В and the sum of all losses 
is 7dB. 


Express the net gain and net loss. There are two 
answers here: 


The net gain is +3dB. 
The net loss is -3dB. 


Conversely, if the sum of all gains in that system 
is ?dB and the sum of alj losses is IOdB. then the 
net gain is -3dB and the net Joss is +3dB. 


I prefer to speak and to calculate in terms of 
whatever produces a positive number. so 17 the 
lirst example. net gain of 3dB is best. while in 
the second example. a net loss of 3dB is 
preferred. 


You wil find it it mathematically easier to put the 
larger or Wwe numbers in a ratio “on top." and the 
smaller “on the bottom.” 


Logarithms really don't care which way vou do it. 
but one way produces negative decibels while the 
other produces posiive ones. ГЇ help vou with 
such concepts so vou fl sec how thev work. 
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dB - 101og, <= = 10(2) =20 


] 
db =toL — = 10(—2) = -20 
981199 (92) 


Okay. let's move on........... 


Ratios of power (P) converted to dB are always 
ten times the logarithm of the power ratio. But for 
ratios of voltage and current (Е and D, 105 20 
times the logarithm of the voltage or current ratio. 


Ers A 
dB =20 Log, TAEA 


2 2 


Don't iet that snow you like it did me for a few 
years. Voltage 15 not power and current is not 
power: power is voltage x current! 


As an exampie, if your directional antenna delivers 
100 ЦУ (100 microvolis) of а certain signal to 
your receiver and an omm antenna delivers 50 uV., 
then the gain of the directional over the omm is: 


dB -20Log,, [69 
5 

= 20102,2 

= 20(.301) 

= 602 


So the directional has a 6dB gain over the omni. 
About right. 


Here`s a calculanon io prove what 1 said about the 
relationship between logarithms and decibels. and 
to help vou Keep it straight. 


1 


" 
dB = 20Log Е ге 


Let's use the antenna example above and convert 
the microvolts to power. Go back to Ohm's Law. 


Remember? We, we Know the voltages into ine 
antenna and we can safeiy assume thar its 
impedance is 500. 


Therefore: 


(1004 V)* 
50 
| (100x10*)100x105) - 
Ё 50 ^ 
| 10000 x 107 
7 50 
= 200 x 10 watts 
200-pW 


P= walts 


alts 


watts 


Ц 


апа... 


P2 (504V)* 
50 

| (SOx 10 (50x 1079) 

m 50 

2,500x10^" 

= —— watts 
50 

= 50x10 watts 


-50-pW 


Watts 


watts 


We have two power levels now that correspond 
with the two voltage levels: 200 picowatts and 50 
picowatts. You can have some confidence in this, 
now: 


200 


dB -l0Log,,—- 


which equals ten times the Log of 4. or 6dB! So 
you see, 10 times the Log of Power equals 20 
times the Log of either Voltage or Current. 


Our assumption of 50€2 for the antenna is valid so 
long as it’s either manufactured to be 500, or is 
matched and balanced to be 500, If, however, 


iat direction;d amignaa wete a TV antenna, баса 
(Qc MX coax copio with e d d (000 18 750) 
ЛЕВ qq unsformern Dern wed nas ce 


reCaiculute using 3000. 


The resulong 1.5-i0-? Standing Wave Капо wil) 
introduce a bit of error (4%) into the calculaaon. 
which can be disregarded for casual comparisons. 


Just remember to take into account the antenna's 
impedance (resistance) when converting received 
power to microvolts: 


P-E-R 


WHY LEARN IT? 


Your understanding and enjoyment of radio will 
be enhanced if you acquire a fundamentai 
understanding of logarithms and decibels. For 
one, the whole world of radio works in those 
units, and for another, once you're comfortable 
with them they're a whole lot easier to work with 
than the calculations you've been using 


Decibels are additive and subtractive, you see! А 
series of gains and losses in a radio system can be 
a nightmare to analyze, if expressed in raw 
numbers, but can be easily combined into a net 
gain or loss if expressed in decibels. You can 
more easily understand what's going on in a 
system by the use of decibels! 


We're going to use the hell out of decibels in an 
automated fashion just a few pages ahead. I’ve put 
together a calculating engine that will do most of 
the work for you. 


So stay relaxed... and enjoy the ride. But hold 
onto your hat. There's more, and it's good stuff! 


HOW TO COMPUTE GEODETIC 
BEARINGS & DISTANCE 


And get the most out of the Ultimate Scanner, too! 


There are plenty of "Great Circle" programs out 
and about for hams and shortwave listeners that 
compute Great Circle distances and directions. 
These are okay for practical purposes, especially 
hobby work. 


But they can be quirky, inaccurate, and not fun, 
especially if you're a modern computist who uses 
Windows, OS/2, Unix, or other operating system 
that's capable of supporting several different tasks 
at the same time (multitasking and multithreading). 
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Great Circle programs tend to be very specific to 
computer type and rather unyielding with respect 
to format of the output data and applications for 
the data outside the program. 


Well, I have a great Great Circle computation for 
most any computer and most any environment! 
But first... why would a scannist using his 
particular Ultimate Scanner need to know how to 
compute bearings and distances? 


Many avid scannists are interested in other areas 
of hobby radio, including ham. SWL, and/or 
Citizens Band. Each of these specialized pursuits, 
including scanning, can be highly enhanced with 
the right tools and know-how. 


Knowledge of how to compute bearings 
(directions) and distances can add some power to 
the ol' radio warbag. For instance, every scannist 
worth his salt knows that VHF-UHF signals are 
“line of sight" only, right? 


Yeah, they "know" that. but it ain’t true. 


VHF-UHF signals "diffract' around the curve of 
the earth and around obstacles. Diffraction is the 
change or loss of coherence in a beam of RF or 
light energy that occurs due to self-interference. 
when the energy beam reaches "edges." or 
changes. of the surface along which its traveling. 


Jt doesn't happen in space, but it certainly does 
here on earth. Апа we have to take it into account. 


The amount of diffracuon varies considerably with 
many factors, including weather and atmospheric 
conditions. Still, even over a glass-smooth ocean, 
UHF signals can penetrate and be detectable at 
least 1596 beyond the optical line of sight. 


Under favorable conditions, this can go to 4046 or 
more. Out there at those Kinds of distances. 
though. the average scannist won't detect anything 
but noise. 


It the Ultimate Scanner station is properly 
equipped with a directional beam antenna, à low 
noise preamplifier, low loss coaxial cable, and a 
finely tuned scanner. these distances can be 
reached. 


On the other hand, a directional beam antenna can 
easily lose signals if its not correctly aimed in the 
direction of the transmitter. because it sacrifices 
omnidirectionality for gain 
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So there you have it... distance and direction. If 
you know how to calculate them, you have a 


better chance of grabbing otherwise undetectable 
signals. 


First, let's learn how to estimate the basic line of 
sight (optical). It's easy: 


Distance of antenna to __ 
Optical Horizon, miles — 


2H 


where H = height of antenna above ground, fei 


Example: If your receiving antenna is 50 feet 
above ground level, then your optical horizon is 
equal to the square root of twice its height, or the 
square root of two times 50; or the square root of 
100, which equals 10 miles. 


Now, that's just the distance to the horizon. Radio 
horizon, thanks to diffraction, goes an additional 
15% for about 11.5 miles, give or take а bit. 


That's about the limit of your range of detection 
for transmitters that are at ground level out there 
on the horizon. But that distance goes farther if the 
transmitter antenna 15 above ground level. 


That distance is extended by an additional РН 


at the transmitter end, you see. Therefore. if the 
transmitters antenna is also 50 feet above ground, 
then the optical line of sight between the two can 
go as far as 20 miles, and the radio line of sight to 
23 miles or so. 


Bear зп mind that the only "perfect" earth curve 
exists over sizeable bodies of water. 


Land masses definitely alter the characteristics of 
the radio and optical horizons, sometimes for the 
better, and sometimes for the worse. 


Surprisinglv, the average remains that of over 
water and the above equation is a verv good initiai 
estimator for your range of detecuon. 

Assuming that your antenna 15 about 30 ft above 
ground and the typical transmitter antenna is 70 ft 


above ground, then maximum ranges càn be 
expected to be about 20-25 miles. 


Figure 9-2 depicts this concept. 
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Horizons... 


Figure 9-2: 


Optical Line of Sight 


Yours and E's Horizon 


Earth 


(not exactly to scale) 


Transmitter 


Transmitter 


E's Horizon 


Analysis: Given your scanning post at (B), you should be abie to detect most signals 
between the horizon at (A) and the horizon at (C). All areas from (C) to (F) will be below 
the horizon from your post at (B). If there were a transmitter at (D), you'd be hard pressed 


to detect it. However, a transmitter at (E) should be within your hearin 
is high enough to “peek” into the line of sight from your location at (B). 


range because it 
he transmitter at 


(E) should be able to cover the range between (C) and (F). Finally, any point above Line 
(Y) will be within optical line of sight of both stations, (B) and (E). The most cursory 
examination of this drawing should make the line of sight concept fairly clear. 


RADIO VS OPTICAL LOSS 


Don't get hung up on the additional yardage of 
"radio line of sight” in contrast to “optical line of 
sight." 


The principles are much the same even though 
computing radio line of sight involves more 
variables than does optical. The compleat scannist 
uses optical range to assess the relative certainty of 
his radio range, and then factors in radio line of 
sight and various qualities of the station to 
establish a "blueprint" for his location. 


It all starts with the square root of twice the height 
of your antenna. but it sure doesn’t stop there, as 
you will soon find out. 


COMPUTING BEARINGS 
AND DISTANCES 


Okay, I said 1 had a hoi one for vou and here it 


5... Well, 2 wermerupper, am way, 


Rather than a clumsy p^ 
not work en vour соті 
exuemeiv precise, easy -To-us? spreadsheet 


ux that might or mign 
.lam giving vou an 
mode: 


T 
| 
| 
‹ 
{ 
i 
i 


{ New ler me elt vor 


* chose. 


that will enable you to instantly and conveniently 
calculate your own Great Circle distances between 
any two points on earth, and more: you'll also gei 
the bearings (directions) from one to the other! 


The spreadsheet model that I'm about to iay on 
you was developed using Microsoft EXCEL 5.0 
and tested on Microsoft Works 3.0, so it will 
operate fine with егег. It should also be 
compatible with most other spreadsheets. with 
little or no alteration. 


If it does need modification, and that depends on 
your choice of spreadsheet programs, the 
necessary changes wil] be slight and few. 


It should work across a wide variety of computers 
and operating systems, from Macintosh and Apple 
H svstems to all IBM/compatibles to Atari, Amiga, 
and even Commodores. 


You only need to have a spreadsheet program 
(Letus 1-2-3 Quattro. Excel, MS-Works, 

Appie Works. CiarisWorks, \-Lire, etc.) and io 
enter the iabels and formulas exactly as given. Us 


i avery cicar-cut piece ci cake, 


à ue about che mode! that i 


in 1866. а possibly deranged fella. bw the name 
of Clarke Jerermined that the earth i not a perfect 
sphere; rathe: 1t bulges пов in the Sourhern 
Hemisphere 


The quality of his work will surprise xou when 
you learn that the Clarke Spheroid of 1866 (his 
mathematical process) remains the basis for 
geodetic computations to this day. Itis very 
accurate, even for engineering and surveying. 


While Clarke’s calculations and corrections for the 
elliptical deviation of the earth's shell from 
sphericity are rather complicated and beyond the 
capability of most hobbyists, I have simplified the 
procedure so that a 4th grader can run the model 
and get extremely accurate results. 


The equations are built into the spreadsheet 
formulas that I’m about to whip on you. You need 
only type the formulas into a spreadsheet of your 
preference, character-for-character. You only have 
to build the spreadsheet once. and then you've got 
а new tool that will stay sharp for a long time. 


When that's done, enter the latitude and longitude 
numbers for each of two sites in the blanks 
provided and the spreadsheet wil] instantly 
calculate and present distance in miles and 
kilometers between the sites, and azimuths, 
bearings, or headings with respect to True North 
for each site. 


It couldn't be easier, and beats the hell out of 
Great Circle programs and manual calculations. 
You really don't have to know what you're doing. 


And if you just can't stand to type, you can 
download the necessary file(s) from my BBS and 
import it into your spreadsheet, easy as you 
please. The filename is SPRED.ZIP. See Chapter 
1 for guidance to the BBS. That file will contain 
the actual WORKS and EXCEL spreadsheets as 
well as textfiles suitable for importing into almost 
any spreadsheet. 


SPREADSHEET MECHANICS 


If you are going to tvpe it in, then open your 
spreadsheet and set up for five columns bv 53 
rows. Columns are labeled from lett to right, as A 
through E. while rows are numbered fram iop to 
bottom as 1-55. 

-ASS are label 


PON RAK erm 


Ja DARS 


The first five celis in Соп. A 4 
beuders, бю: AGASSI aro rn os 


Viene Bess ОП air GOD 


CAS 


ee ae ee ae 
М б oett. d а ме, ii 


a mm —— 
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character, exactly as убы sez them. BE C1, DI. 
and El are labeUheader celis. R2, B3, B4. and 
BS are critical calcujated сеч. «o enter the 
formulas exactly as vou see them. 


Cells B2-BS calculate the decimal values of the 
latitude and longitude coordinates that you will 
enter into cells C2-C5, D2-D5, E2-E5. More 
on those cells Jater, 


Cells C6-E6 are labels that show you where to 
enter your data. 


Cells B6 through B53 are comments and labels, 
so you can do with them as you please, though 
B52-B53 and C51-E5]1 are identifier labels for 
the degrees/minutes/seconds results that appear in 
C52-C53, D52-D53, and E52-E53 so you 
shouldn't change them. 


Labels are also entered into C47-C50 and D47- 
D50 to identify distance and decimal-degree 
results that appear in cells Е47-Е50. Cells CS2- 
E52 and C53-E53 are formulas to convert the 
calculated decimal bearings in E49-ESO back into 
degrees, minutes and seconds. C7-C48, D7- 
D48, and Е7-Е48 should be left blank for now, 
because we will have a mind-blowing use for 
them a little later. 


Refer to the Technical Structure of the spreadsheet 
just ahead to construct the portion described 
above. Then you need only enter your latitude in 
degrees, minutes and seconds in cells C2-E2 and 
your longitude in degrees, minutes and seconds in 
cells C3-E3. Enter the target's latitude in cells 
C4-E4 and its longitude in C5-E5. 


Results will instantly appear in Е47-Е50 and in 
C52-E52 and C53-E53. 


It really isn’t complicated at all. 


SPREADSHEET MATH 


You don't really want me to dwell on spreadsheet 
mathematics, but to get you oriented I will 
describe the first few actions that take place in the 
À column. 


The first math entry is a constant value in cell A6: 
1E-20. This is spreadsheet language for scientific 
notation: i x 10%. This extremely small number 
is used at key ponus in the calculauons to prevent 
errors caused by airy at division by zero. 


Сен А? = - L* Bd. cubs tne 


Hagin XY eT AS ота 
comenis of v haters 
iin Celi Ва ose calculated aecimal solus of He 
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B's longitude) and multiplies it by -1 to change the 
sign of the number. Cell АЗ, Z2 B24 A7, combines 
Site A latitude with Site B latitude to get an 
angular difference between the two latitudes. That 
calculation, in Cell АВ, is tested for zero in A9: 


zIF(A8z0,A6,A8). 


If both sites were on the same latitude, the 
difference in A8 would be zero, and a string of 
errors would result because of subsequent 
divisions by zero. 


To prevent that, if the contents of A8 are zero, 
then A6 is substituted, otherwise, whatever is in 
AB stays there for continued use. A9 analysis: 
"If whatever is in A8 equals zero, then transfer 
the contents of A6 to this cell; otherwise use 
whatever is in A8." 


Cell A10 is a pure logic decision point. 
zIF(A9«0,1,0), 


reads, "IF whatever in A9 is less than zero, 
THEN enter ] into A10; ELSE if whatever is in 
А9 15 zero or greater. then put О into A10.” Later 
into the calculations. the spreadsheet checks back 
at A10 to see if there is a 1 ога О and makes 
decisions accordingly. 


Getting the idea now? 


Relax, even if you don't want to become a 
spreadsheet expert. all you have to do is enter 
these formulas exactly as { show you in the 
Technical Structure and the arithmetic engine will 
do all the rest before you can yawn. 


It is handy to know that personal computers do 
not work in degrees. For some mystical reason, 
they work in radians. We need to work in 
degrees. so all cells with tngonometric functions 
will include a conversion for radians to degrees. 


Fortunately. there are exactly 27 radians in a 
circle. For instance, Cel) A20 calculates the sine 
of an angle in А19. Without the conversion 
factor, the result would be the sine of that many 
radians. 

Okay. since there are 2л radians in a circle (360°). 
it follows that there are 7/180 radians per degree. 


=з А195 PIG/T80) 
serves the purpose in one fell swoop We have an 
opposite situation m Cell 433, 
=АТАМ А2) ERO/TTO 


b 
| 
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where A32 is a tangent and must be converted 
back to an angle with the arctangent function. The 
correction for radians to degrees for the arc- 
functions is inverse that of the angle functions, so 
don't be confused by the 180/PI() factor in A33. 


Another thing useful to know is how most 
spreadsheets use pi (т). It has to be spelled out 
followed by open and closed parentheses, PI(), no 
spaces, and nothing within the parentheses. 


This, and an explanatory table just ahead should 
take care of any confusion and ambiguous 
meanings. Again. if you are not a spreadsheet 
expert, don't worry about it; just enter your 
formulas exactly as I show them, and there should 
be no problem with one exception that some 
spreadsheets may do things a little differently than 
Microsoft's. 


No big deal, because any needed changes will be 
self-evident and can be incorporated immediately 
after consulting your spreadsheet documentation. 
Most are much alike and I tried to avoid the hairy 
kinds of commands that are likeliest to differ from 
one to the next, You'll do fine...... 


When you re all finished, your spreadsheet should 
appear a little like mine. For now, you should 
disregard everything shown i cells C10-C46. 
D10-D46, and Е10-Е46. We wili add some 
great things to this section à little later. 


THE NUMBERS 


Warm up to spreadsheets and learn how easy it is 
to work with them. For Great Circle calculations, 
you need do no more than enter latitude and 
longitude in C2-C5, D2-DS, and E2-ES. 


These twelve cells will always be your data jnpuc 
cells and you can change them at any time, of 
course, to instantly recalculate and show the 
results. Cells C2-CS are for DEGREES only: 
D2-D$ for MINUTES only; and E2-E5 for 
SECONDS onlv. 


In other words, you should enter ONLY data in 
these twelve cells. The spreadsheet will take care 
of everything else for you in a flash, including ihe 
calculated decimal equivalents in Cells В2-В5. 


The spreadsheet cannot easily work with Lat & 
Lon coordinates like we eater them into Columns 
C. D. and E. bat there's no sense іп you manually 
converting them into deciowd form when the 


! spreadsheet can dort for you. Lautude and 


iongitude coordinates are almost always found in 


the form of DDD ММ SS . o tho cons ereon 
into decamál is necessan , 

By the way. the spreadsheet rormutàs arc 
exceptionally accurate and produce results that 
agree with data taken from US Geologica! 
Surveys. 


You can enter fractions of seconds in E2-E5 
(assuming you know them), but this 15 not 
necessary unless you're doing serious engineering 
or survey work. 


For instance, the latitude for Site B could just as 
readily be entered as: 34 09 35.459. 


LATITUDE & LONGITUDE 


There's meaning and facts behind al] these weird 
numbers: there are 360? in the circumference of 
the earth, so each 15? of longitude represents one 
hour of time (15 x 24 = 360). The earth's 
equatorial circumference is about 24,859 miles. so 
24,859 = 360 = 69.05 miles per degree of 
longitude. 


Since there are 60 minutes per degree. each minute 
of arc 1s about 1.15 statute miles, which happens 
to equal 1 nautical mile. 


At 60 seconds per minute, each second is about 
0.019 mile, or 101 feet, or a bit more than the 
distance from home plate to first base on a 
baseball diamond. 


Clearly, accuracy to the second is not important. 
Still, my spreadsheet will give accuracy down to 
the distance between your ears if you input 
information that's sufficiently accurate. 


Data entries must be all positive values for North 
latitudes and West longitudes; and all negative 
values for South latitudes and East longitudes. 
When negative numbers are required, each cell 
data entry must be negative. 


For example, the latitude for Rio De Janeiro, 22° 
57 09"S is entered as: -22 -57 -09 


FINDING TRANSMITTER LOCATIONS 


All this sturf is self-explanatory, bui the question 
arises as ta how Lar and Lon coordinates arc 
obtained in the first miace ? 

The best was is direct from the FCC license 
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ШАРА ЫЫЗЫ ne роо Cape 


ke Sen ab “jess TO ce 


Cheek’: The ultimate Scanner 


CD-ROM and floppy disks with data straight fron: 
the РСС. Most radio 'icensees musi list tear 
Uansmitter sites Lat/Lon. so that’s public record. 


MORE SOURCES OF DATA 


My BBS offers an on-line FCC database for the 
entire USA, which you can modem-query to 
download frequency files for your area. These 
files contain Lat & Lon data for licensees of 
record. 


Another possibility is to use satellite Global 
Positioning System receivers! These GPS 
receivers are accurate to within about 30-300 feet, 
depending on whether or not a unit is deliberately 
limited to prevent accuracy of military value. 


Stll another way to acquire Lat & Lon coordinates 
for a station is from the FCC license that is posted 
in the operating area of the transmitter site. If you 
can't get in to see the license, you can call the 
station and get the coordinates. 


Be polite... just tell the station manager that you're 
programming a missile. 


MAPS 


You can aiso get the information from US 
Geological Survey Topographical Maps for your 
region. 


If you've never seen these maps, you are in for a 
surprise! What a work of art and beauty your tax 

dollars have bought! Topo maps come in several 

common sizes, but the preferred is what we call а 
"7.5-minute quadrangle.” 


Next best are the “/5-minute quadrangles.” Others 
may serve, also. The point is that topo maps are 
very detailed, sometimes showing YOUR house, 
apartment, or workplace building! 


You can readily calculate your latitude and 
longitude coordinates from a topo map as well as 
those for the radio stations that interest vou. 


This is a fun thing to do, I might add. US 
Geological Survey topo maps ure available from 
many sources. including retail map dealers in most 
areas, as Welt as from the USGS itself. Larger 
metro regions often have a USGS office where 
maps can be purchased 


сап even be derived tram Rand-MeNaljy 
"Nu Marking Tor 


pach mans where ther: 
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extremely accurate data from this source, but for 
many it's good enough. 


You can get useful data from road maps by a little 
work and some simple calculations, however. 
Figure 9-3 shows the mechanics of how to do it 
from any map that shows Lat and Lon. 


Figure 9-3: Using a common road map 


Longitude & Latitude 
from Road Maps 


NOTES 


1. Point "О" is your location 


2. Point "А" is the closest, lower right reference 
point to your location. 


PROCEDURE 


Examine Figure 9-3. Find your location on the 
map and mark it with a pencil. Label that point 
“Гу 

Now го out to the right and left margins of the 


map, where in small obscure text will be shown 
latitude tic marks. 


Find and mark the latitude tics just above and just 
below your location at "D". 


Now go to the top and bottom margins of the map 
where in smal! obscure text will be shown 
longitude tic marks. Find and mark the longitude 
tics just left and right of your location at "D". 
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Now draw straight lines to overlay the longitude 
and latitude marks you just made so that a 
rectangle encloses your location at "D". 


Label the lower right intersection of latitude and 
longitude closest to you as Point "A". Label the 
lower left intersection of latitude and longitude 
closest to you as Point "B". 


Label the upper right intersection of Jautude and 
Jongitude closest to you as Point "C". Now 
measure the distance from “А” to "B", which in 
this example is one inch (1.0"). Next, measure the 
distance from “A” to "C", in this example it's two 
inches (2.0"). 


CONVERTING THE DATA 


Now comes the fun part. Draw a line from your 
location down to intersect the line "A-B". Label 
that intersect point as "E". Draw another line from 
your location to the right to intersect the line 
“A-C”. 


Label that intersect point as “Е”, Measure the 
distance from “A” to "E", in this example, 0.6". 
Measure the distance from “A” to “F”, in this 
example, 1.3". 


It is a simple matter to calculate your unique 
latitude and longitude coordinates using simple 
ratio and proportion math. 


The lower right reference point is the starting place 
where in the example, latitude is 43? 00'. The 
upper right reference point is latitude 44° 00', 
with a distance of 2" between them. 


Your latitude is 1.3" above the reference, so: 
Example lautude: 


= 43.65° 


It's easy to convert that decimal of a degree to 
minutes and seconds, as follows: 


DEGREES = (integer) = 43? 
MINUTES 


(decimal of a degree)(60) 


0.65 x 60 
39.00 


eH Cheek*: The Ultimate Scanner 
SECONDS = (decimal of a minute)(60) to obtain that particuíar coordinate for your 
= 0.00 x 60 locaton. 
= 0,00 


Therefore, the example latitude is; 43.65? ог 
3° 39° 00" 


Longitude is calculated in exactly the same 
manner. An example follows. 


0.6 
EAT: 


117.60" 


li 


Il 


DEGREES 
MINUTES 


K 


(integer) = 117° 


(decimal of a degree) x (60) 
0.60 x 60 
36.00 


(decimal of a minute) X (60) 
0.00 x 60 
0.00 


SECONDS 


Therefore, the example latitude is: 117.60? or 
117° 36' 00. 


INCREMENTS 


This method of interpolating your latitude and 
longitude coordinate from road maps is valid only 
if the degrees are annotated in 1° increments. 


If in 30° or 2? or any other increment, the method 
is still valid, but you'l] have to be careful to keep 
your references straight. Suppose the increment 
was 5? at 2-inch intervals, and your line were at 
1" – then. you'd have to add 2.5? to the reference 


It just happens that most Rand McNally and other 
road maps Гуе seen have 1? increments. USGS 
7.5 minute quadraneie topographical maps have 
2.5 (0.04?) increments. You can see why they're 
so accurate (and fun). 


My Distance & Bearing Specushect will calculate 
good data for you, even using road maps, but it 
only gets better with the more accurate latitude and 
longitude coordinates that you can feed it. 


Anything beats laying out rulers and protractors 
on crumpled roadmaps. 


Yuk. But shat works, too. 


USING MY DISTANCE-BEARING 
SPREADSHEET 


It’s a snap. 


Type in the Site A and Site B coordinates in cells 
C2 through ES, and page down to the bottom of 
the spreadsheet where the results will be waiting 
for you — unless your computer is so slow that 
you have to blink a few times before the 
calculations are complete. 


And that’s all there is to making this baby work. 
It's useful, extremely accurate, and amply meets 
even the most serious hobbyist's needs. And it 
beats the socks off these bulky, cumbersome 
"Great Circle" programs you see floating around. 
And, what's more, it will be useful for what's 
coming next. Read on, McDuff... 


Table 9-1 15 a column-by-column explanation of 
what you need to know to build a worksheet of 
your own. 
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Table 9-1: Standardized spreadsheet symbology 


Typed 
Symbol Symbol Keyboard 
Name Appearance Location 
Asterisk * Uppercase 8 
Open paren ( Uppercase 9 
Closed paren ) Uppercase 0 (zero) 
Both parens ( ) See above 
Comma f Self-evident 
Plus sign + Uppercase equal sign = 
Minus sign - Lowercase underscore 
Forward slash / Lowercase question mark 
Left caret < Uppercase period 
Up caret ^ Uppercase 6 
Decimal Period key 
Equal sign = Left of backspace key 
1х 10" | E-20 Standard Keyboard text 
Sine SIN " “ И 
Absolute Value ABS : 
Cosine COS : 
Arc Tangent ATAN " 
Logarithm LOG 
Pi or x PIO 
Logical If ТЕ ' 
Square Root SORT Ы 
Truncate TRUNC 
Integer INT 


Meaning in Spreadsheet 


Multiply by 

Algebraic organizer, begin 

Algebraic organizer, end 

Required after the PH) entry (no spaces) 
Logical separator 

Add 10 or positive value 

Subtract from or negative value 

Divide фу 

Logical Is-Greater-Than 

Exponent; 2^4 is same as 2° 

Decimal point 

Equal to, or equals. Formulas begin with = 
Very small real number. larger than zero 
Trigonometric function 

Changes negative numbers 10 positive 
Trigonomeiric function 

Trigonometric function 

Returns logarithm (base 10) of a number 
Ratio of circumference to diamerer of a circle 
Conditional logic. IF(somerhing.do, else) 
Square root of a number 

Remove the decimal part of a number 
Rounds decimal down to nearest whole number 


NOTE: TRUNC and INT are similar in that both return integers. TRUNC simply removes the 
fractional part of the number. INT rounds numbers down to the nearest integer based on the value 
of the fractional part of the number. INT and TRUNC are different only when using negative 
numbers: TRUNC(-4.3) returns —4. but INT(-4.3) returns —5, because —5 is the lower number. 
Either one will work for the same purpose in the spreadsheets given for the Ultimate Scanner. 


Portions of this spreadsheet are based on the Clarke Spheroid of 1866 as published by the Coast and 
Geodetic Survey of the US Department of Commerce in Special Publication No. 8, Formulas and 
Tables for the Computation of Geodetic Positions, Seventh Edition. 
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TECHNICAL STRUCTURE OF THE GREAT CIRCLE AND 
VHF-UHF PROPAGATION ANALYSIS SPREADSHEET 


Open a spreadsheet and enter exactly what is shown under the FORMULA or TEXT column into the cell specified under Ше CELL 
column Formulas begin with an eguads (=) sign so enter exact symbols, numbers and text as shown without spaces. (Pure text entries 
may contain spaces.) Do nol interpreli here, lake everything literally. ЛИ “0° characters in formulas are zeroes, except LOG, an “Oh”. 
Shaded entnes are for the Great Circle calculations Unshaded portions (! 77F-CHF Path fnaiysis) may be omitted, if desired 


=ABS(A14) 
A17 =В2+В4 
A18 =А16/2 
A19 =А17/2 


A20 -SIN(A19*PI(V180) 
A21 -A18*A20 


A22 =А20^2 

A23 147.7397736 
А24 =A22/A23 
A25 =+1-A24 


A26 -COS(A19*PI(y180) 
A27 =A26°A16 
A28  -A25*A27 


A28 =1/А23 
A30 =1-А29 
A31 -A28/A30 


A32 =АЗ1/А11 

A33 -ATAN(A32)*180/PI) 
A34 =1Е(А10=1,0,180) 
A38 ziF(A1021,-1*A33,A33) 
A36 =IF(A15=1,-1°A35,A35) 
A37 =А34-А36 

A38  -IF(A15-1,-1*A21,A21) 
A38  -(A37-A38)*180 

A40 =А39_720 

A41 =360+A40 

А42 =1Е(А41<0,А41+360,А41) 
А43  -SIN(PI()/180*A33) 
А44 =1/А43 

А45 =А44*А27 

А46  -A45*69.17147736 
ААТ -SQRT(A25) 


А48  -IF(E50»-180,E50-180,E50* 180) 


A40 =А38*2 

А50 =A48+A49 
A51 750-720 
A52 =360+А51 


[A53  zIF(A52«0,A52*360,A52) 


CELL FORMULA or TEXT 
A1 

A2 Latitude Site "A" 
АЗ Longitude Site"A" 
A4 Latitude Site "B" 
AS Longitude Site "D" 
A6  -1E-20 

А7 =-1*84 

A8 =В2+А7 

А9 =IF(A8=0,A8,A8) 
A10 -IF(A8«0,1,0) 
A11 =ABS({A9) 

A12 =-1°85 

A13 -*B3*A12 

A14 -IF(A1320,48,A13) 
A15 -IF(A14«0, 1,0) 
A18 


CELL FORMULA or TEXT 


B1 DECIMAL 

B2  -C2*02/60*E2/3800 
B3 =С3+03/60+Е3/3600 
B4 =(C4+D4/60+E4/3600) 
BS =С5+05/60+Е5/3600 
Bê Division by 0 protection 
B7 Change sign 

B8 Math 

B9 Logic 

810 FLAG-0 - Logic 

B11 Absolute value 

812 Change sign 

B13 Math 

814 Logic 

815 FLAG-1 -Logic 

B16 Absolute value 

B17 Math 

818 Math 

B19 Math 

B20 Sine 

B21 Math 

B22 A20 squared 

B23 N. America correction 
B24 Math 

B25 Math 

B26 Cosine 

B27 Math 

B28 Math 

B29 1/х 

B30 Math 

B31 Math 

B32 Math 

B33 Arc Tangent 

834 Logic 

B35 Logic - Change sign 
B36 Logic - Change sign 
B37 Math 

B38 Math & logic 

B39 Math & Jogic 

B40 Math & logic 

B41 Azimuth Logic, 8-A 
B42 Sine 

B43 1X 

B44 Math 

B45 N. America correction 
B46 Square root 

B47 Logic 

B48 Math 

B49 Math 

850 Logic 

851 Logic 

B52 Azimuth, A to B (°N)—> 
B53 Azimuth, B to A (^N) 


GELL FORMULA or TEXT 


C1 
C2 
C3 
c4 
C5 
ca 
С? 
C8 
C9 
C10 
C11 
C12 
C13 
C14 
C15 
C16 
C17 
C18 
C19 
C20 


DEGREES 
32 

117 

34 

118 


Site А Name > 
Site B Name > 
Engineer > 
Date > 


Gain 


Loss, add-on 
Loss, basic 
Loss, Free Space 


Loss, total 

Loss, total 

Loss, total 

dB below i-watt 
dB below 1-watt 
dB below 1-watt 
Rx Signal Level 
Rx Signal Level 
Rx Signal Level 
Max Line of Sight 
Max Line of Sight 
Max Line of Sight 
Miles 

kilometers 
Direction/Bearing 
Direction/Bearing 
DEGREES 
=TRUNC(E49) 
=TRUNC(ES0) 
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TECHNICAL STRUCTURE OF TAE 
VHF-UHF PROPAGATION ANALYSIS SPREADSHEET (Concluded) 


CELL FORMULA or TEXT CELL FORMOLA or TEXT 

Di MINUTES E1 SECONDS 

02 55 E2 3 

D3 5 E3 44 

DA 9 E4 35 

05 3 Е5 30 

D8 ‘ENTER COORDINATES ABOVE ^ E6 

D7 E7 

D8 E8 

D9 E9 

010 SIYE INFORMATION E10 

D11 Hertzian Intercept, San Diego, СА E11 

D12 NOAA Weather Sta, Mt. Wilson, CA E12 

D13 Bill Cheek E13 

014 3/28/1995 12:02 E14 

D15 E15 ENTER RADIO PATH DATA BELOW 
D16 Transmitter Frequency (MHz) > E16 182.550 

D17 (A) Ant Height Above avg terrain (ft)> E17 500 

018 (A) Antenna Gain (dB) > E18 0 

019 (A) Misc Site Loss (dB) > E19 5 

020 (В) Ant Height Above avg terrain (ft)> | |E20 5710 

021 (В) Antenna Gain (dB) > E21 2 

022 (В) Misc Site Losses (dB) > E22 1 

D23 Transmitter Power (watts) » E23 100 

D24 Height of Obstacle in Peth (ft) » E24 0 

D25 Shortest Distance to Obstacle (mi) > E25 0 

D26 Notes & units of meaasurement E28 CALCULATIONS 

027 Gain Tx Power relative to 1-май (dBW) E27 =10*LOG(E23) 

D28 Total Gain (dB) E28 =E18+E21+E27 

D29 Disregard this Interim Calculation E28 =IF((E24*E25*E16)>0,10* LOG(E16)*20"LOG(E24)- 10 LOG(E25)—55.B,0) 
D30 Shadow Loss (dB) E30  zIF((E24*E25*E16)-0,0,IF(E29»213,E29, EXP(((1O^LOG(E18) +20* 

LOG(E24)-10*LOG(E25))-55.8)^(0.08534))*4.35459)) 

D31 Plane Earth Loss (dB) E31 = -1*10'LOG(0.00000000000000345*((E17*£20)(E47^2))^2) 
D32 Reference ideal (dB) E32 =38.6+ 20'LOG(E16) + 20*LOG(47) 
033 Loss, add-on, earth curve Typical (d8) | |E33 =Е47^(1.438001208)*0.064950355 
D34 Loss, add-on, earth curve worst (dB) | |E34 =0.08660047*(E47*1.438001208) 
D35 Ideal Path Loss (dB) E35 =E30+E32+E19+E22 

D36 Typ Path Loss (88) E36 -=Е31+Е30+Е33+Е19+Е22 

D37 Worst Path Loss (dB) E37 =Е30+Е31+Е34+Е19+Е22 

D38 Ideal Rx Power {dBW) E38 =Е35-Е28 

039 Тур Rx Power (dBW) E39  -E36-E28 

D40 Worst Rx Power (dBW) E40 =Е37-Е28 

D41 Ideal RSL (uV) E41 =SQRT(50°(1/10%(E38/40))))*10°6 
D42 Typical RSL (uV) E42 =SQRT(50*( 1 10*(E39/10))})*10°6 
D43 Worst RSL (ОУ) E43 -SQRT(50*(1/(10(E40/10))))^ 10^6 
D44 Ato Horizon (mi) E44 =SQRT(2*E17) 

D45 Bto Horizon (mi) E45 -SQRT(2^E20) 

D46 Max poss A to B (mi) E46 =Е44+Е45 

047 Path Distance (m) E47 =А46/А47 

D48 Path Distance (km) E48 =1.609344*E47 

D49 Azimuth, A to B (^N) E49 =IF(A53<0,A53+360, А53) 

D50 Azimuth, B to A (^N) E50  -IF(A42«0,442*360,A42) 

D51 MINUTES E51  SECONOS 

D52 =TRUNC({E49-TRUNC(E49))*60) E52  -(((E49- TRUNC(E49))*60)-D52)^60 
{D53 =TRUNC((ESO-TRUNC(E50))"60) E53 >(((E50-TRUNC(E50})*60}-D53}*80 


NOTES: (1) Cell E30 contains one continuous formula with no spaces or line brcaks | | 
(2) For MS-WORKS and other spreadsheets that do not recognize the TRUNC commend, use the following instead: 


D52 zINT(E49-INT(E49))60) 053 -INT((ESO-INT(ESO))"60) 


C52 -INT(E49; C53 -INT(ESO) 
£53 z(i(ES0-INT(ES0))*60)- D53)*60 


E52 z(((E49-INT(E49))*601-D52)'60 
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Absolutevolue — — 


„00047687 7 
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Tronsnititer Frequency {МИ} > 


_ | (A) Ant Height aboveavg tenoin (fü:» 


(8) Ant Height above avg terrain (ft) > 

| (B) Antenna Gain (dB) > 
lh Shalom ABF > 
Transmitter Power (watts) > 


Haight of Obstacle in Path (h) > 


7" |. Shortest Distance to Obstacle (i) > 


Notes & ünlts of meosurement 


[Goin Tx Powertlative to twat (dBW) 20.00. 
Goin =; Totol Gain (98) 


^ Disregord this interim calculation 
Loss, add-on Shadow. Liss (dB) 
Loss, basic - PlaneEorth Loss(d8]| 
poce: dB) 
Loss, add-on, eath сое" typical (dB} 
Loss, add-on, eorth curve.” worst (B) 


"es, total Ideal Poth Loss (dB 120.26... 
Loss, totol “Typ Poth Loss (dBh —— 


Loss, total: Worst Path toss {d8 


- [dB below V-watt ideoí Rx Pwr (38W) 


dB below 1 кон Тур Rx Power (d w)| 
dB below lwat. . Worst Rx Pwr [dB 


|Rx Signo! Levei Typical RSL (uV) 
d та} Levet Worst RSL (у 
|MexLineofSigM “Ato Horizon (mil) — 31.62 
.. |Max Line of Sight... to Horizon (mi) 
Мох Line of Sight Мах poss A to B (ті) 
Miles Poth Distance (ті) |. 
kilometers -. Path Оізапсе (kn) A 
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RADIO PATH ANALYSIS FOR 
VHF-UHF 


This is really interesting. Imagine yourself 60-100 
miles from some action that really interests you. In 
fact, you'd give your upper molars to be able to 
monitor that action on your Ultimate Scanner. 


Try as you might, vou just can't seem to pull in 
any signals from that area. 


For all you know, it might be IMPOSSIBLE to 
receive those distant police, news media, and 
emergency frequencies, but basically, you don't 
know for sure. 


Would you like to know? Would you like to be 
able to accurately estimate the requirements for 
VHF-UHF communications over any terrain, over 
any distance? Well, you might want to, 1f 
knowing in advance could save you a lot of time 
and dollars. 


Sure... with a 200 ft tower, a massive log- 
periodic beam antenna, GaAsFET low noise 
preamplifier, and expensive hardline coax, you 
should be able to receive signals from Katrina's 
Cantina in the Ural Mountains of the former 
Soviet Russia. Spend enough money and you can 
do almost anything... 


BULLINGTON? 


But you don't have the money for such a hairy 
setup. You might be able to cough up a couple 
hundred bucks for a decent beam antenna, 
mounting mast, and preamp, but what if it doesn't 
work after al] that expense and labor? Is the 
money wasted? 


The only thing worse than not being able to get the 
job done is to spend a lot of money and still not 
have a solution! 


Well, { can show you how to ‘engineer’ your 
requirements in advance, thanks to some 
goshawful hard work performed back in the 
1940's by an engineer named Kenneth Bullington, 
who studied VHF-UHF radio propagation so 
thoroughly that he figured out how to predict and 
model its behavior over a wide variety of 
conditions and circumstances. 


To follow Bullington’s work isn’t simple, even to 
this day, but thanks to the computer and other 
modern developments, I can show you how to use 
these techniques without knowing what vou're 
doing, and still come up with some valid data 


about what it takes to receive signals at Point A 
(your site) from a distant transmitter at Site B. 


We're going to put the mathematical relationships 
of these calculations into a spreadsheet (call it an 
automatic calculation engine). Then, by simply 
entering the variables, the computerized engine 
will do all the work. Let it understand Bullington! 


APPLYING THIS TO THE ULTIMATE 
SCANNER 


Let's analyze some of the parameters of radio 
communications that are above 30 MHz, and that 
impact tbe Ultimate Scanner and its operator. 


The threshhold of signal detection for most 
scanners is about ILIV (1-millionth of a volt), 
below which the signal is either noisy or not 
detectable. Some scanners are a little better; some 
not as good, but 1V is the normal reference point 
and we will use it. 


The Ultimate Scanner, though fed as good a signal 
as the channel can produce by an excellent 
antenna, good cables and connectors, remains 
susceptible to the losses that follow, because they 
occur between the transmit and recejve antennas — 
not inside the eJectronics. 


To make it simple: nothing you do to your receiver 
or scanner will find a signa] that just ain't there. 
But, you know that transmitter just over the 
horizon is pumping out lotsa watts. 


What happened? 


FREE SPACE LOSS 


Radio signals weaken in free space at known апа 
predictable rates as they propagate, the first factor 
affecting which is the 'spreading effect caused by 
the ever-expanding wavefront; same principle that 
makes illumination decrease, the farther away it 
gets from the source of light. 


The rules are about the same, too. Double the 
distance, receive one-fourth the power. 


This spreading effect is most consistent and 
predictable in ‘free space’ where the presence of 
ground and other objects is not an issue. Decay of 
radio signals in free space is one of the most 
predictable physical parameters in the universe, 
about Jike free fall m gravity: 


Here's what it looks like: 
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P 4.1x 10d! Calculate the ‘free space’ attenuation of the radio 
Qa = 10106 1o 5- = jOLog,, ; signals: 
Q4 = 36.6 + 20Log,,F + 20Log,, D 
where: Qa = 36.6 + 20Log 120 + 20Log, 75 
(quy = attenuation, decibels Oy = 366 + 20(2.08) + 20(1.88) 
Р, = power transmitted, watts Oy, = 36.6 + 41.60 + 37.60 
P. = power received, watts Og = 115.8dB 
d = distance between antennas. miles 
4 = wavelength in centimeters In piain English, that means the amount of signai 


The above formula is complicated, but can be 
simplified for calculator and computer work in one 
of two ways, as follows: 


p >» р) 
О 4, = 10Log ET lOLog 1,(4560Ғ°а° ) 


or, perhaps better still: 


оь = 366 + 20Los, F + 201060,0 
where 

Qu = attenuation, decibels 

d = distance between antennas, miles 
Е = frequency, MHz 


If you'd like to calculate free space attenuation of a 
radio wave in a spreadsheet, the procedure is as 
follows: 


Enter frequency (MHz) into Cell E16. Remember 
the distance (miles) between antennas from the 
Great Circle calculation in E47? 


Enter this formula into E32: 


236.6 + 20*LOG(E16) + 20*LOG(E47) 


Cell E32 will display the free space loss, in dB. of 
the radio wave. 


As àn example. consider an aircraft 75 miles from 
the airport at 35,000 ft, operating on 120MHz. 


reaching the antenna of the receiver will be about 
1 16-decibels below whatever was transmitted! 
Now we can calculate the approximate received 
signal strength to determine if communication is 
even possible. 


Let's assume the aircraft transmits 4 watts of 
power into an antenna with 3dB gain, and that the 
airport receiver's antenna has 3dB gain as well. 


First. let's caículate received power. We know i 
will be 116dB less than transmitted, so we look at 
path gains first, with 3dB + 3dB for each antenna 
gain, and then there's the 4-watts of transmitter 
power which is 6dB above the OdBW reference of 
one-watt: (dB = 10 Log Gain or Loss = 10 Log 
4/1 = 6). 


So 6dBW of power plus 6dB of antenna gains 
equals 12dB of sysiem gain to offset that 116dB 
of free-space loss. In this example, net received 
power (Pr) will be 116 — 12 = 104dB below | 
watt. or -I04dBW. 


Then: 
dB = 1OLog(Pt-Pr) 
104 = !OLog(l wat + Pr) 
104 = 10Log(1/Pr) 
104 + 10 = Іор (1/Рг) 
10.4 = Log (1/Pr) 
10^ = 1/Рг 
271210 = PE 
Pr = 1 +251x10"°, ог 
Рг = 398x10" watts, 


or 0.0000000000298 waits 
or 39.8-picowatts 


Fun Stuff 
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It's simple to calculate the RSL (Received Signal 
Level), a more meaningful figure than received 
power. 


Ohms Law js our guiding light: 
Р = E+ R, so: 


3.98х10'!! watts = Е? + 500 (virtually al] comm 
systems use 500 antennas) 


(50)( 3.98x10"') = E? 


1.99x10? = E? 


Now take the square root of both sides, and: 


E = 4199x107? 


E = 4.46 x10? volts = 0.0000446 volt, or 
44.6рУ (microvolts) 


Jp. V usually permits usable communications, so 
we сап feel pretty confident that 454V will offer 
more than satisfactory results! 


CAVEAT: The free-space loss formulas apply 
to radio waves traveling in free space only, 
which limits analysis to such situations as 
aircraft-to-aircraft, air to ground, ground to 
air, and space communications. 


Mountain-top to mountain-top and close 
range communications might also qualify 
under the 'free space' rule. 


Free space is generally that portion of the 
wavefront that's at least three wavelengths 
away from earth or any obstacle. 


"Clear Line of sight" is a major property of free 
space, and not the only one. 


PLANE-EARTH LOSS 


Radio signals weaken more when passing over the 
surface of the earth (Plane-Earth Loss). 


The mode! for free-space loss has to be modified 
if a radio wave passes across or appreciably near 


the earth's surface, say within several 
wavelengths. 


The reason can get fuzzy, but think of the earth as 
a sponge that draws power from a passing wave, 
or as a friction surface for a rolling ball compared 
to one in free flight. 


Radio waves decay at a different rate from that of 
free space when they are in the near-field of the 
earth. It stili amounts to a spreading loss, but 
different variables and rates of decay apply. 


This decay model is called Plane-Earth Loss, a 
solution for which is as follows: 


P 
Oa = I0Logu 


T 


d? 


КТ ү 
Oy, = lOLog, 3.45x10 oS 


where: 
соь = attenuation, decibels 
P, = power transmitted, watts 
P, = power received, watts 
d = distance between antennas, miles 
R 


, = height of receiver antenna above 
ground, ft 


br 
| 


= height of transmitter antenna above 
ground, ft 


A spreadsheet solution for Plane-Earth Loss can 
be constructed as follows: 


Enter the beight of the receiver antenna (in feet) 
into Cell E17. 


Enter the transmitter antenna height (in feet) into 
cell E20. 


Refer to Distance (miles) between antennas from 
the Great Circle calculation in Cell E47. 


Then enter fhis formula into E31: 


= -I*10*LOG(3.45E- 1S*((E17*E20)/(E47 ^2)^2) 


The applicable Plane-Earth Loss appears, then. in 
Cell ЕЗ1. 


The Plane-Earth Loss model stands alone, as 
shown, only when the transmiiter and receiver 
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aniennas are within opucal line of sight but below 
the zone of the free space path. 


[f the two antennas are so far apart as to be below 
the horizon with respect to each other, or if there 
are appreciable mass obstacles between them, tben 
one or both of the following models for 
Diffraction Loss and Shadow Loss must be 
calculated and the results added to the Plane-Earth 
Loss to determine the tota) path loss. 


DIFFRACTION LOSS 


This is a special-case additional loss for radio 
Waves that pass across or near the surface of the 
earth where the earth's curve is a partial or 
complete obstacle between the Tx and Rx 
antennas. 


This loss is additive to the Plane-Earth Loss, to 
derive the total path loss for the wave. Diffraction 
loss 1s best explained using a visual analogy. 


Imagine a bathtub of water in the middle of which 
is a brick placed so that it protrudes above the 
surface. Now create a small ripple at one end and 
watch what happens as the wave approaches the 
brick. А portion will strike the brick head-on. 
while portions of the wave will go around a side. 


Immediately behind the brick may be a quiet zone, 
but you will see where the ripples bend around 
and rejoin at some point close behind the brick. 


Those portions of the ripples that bend lose 
strength more so than those which simply pass by 
the brick. This loss as it applies to radio waves is 
called diffraction loss and is a permanent loss that 
is additive to the plane earth loss. Diffraction loss 
is almost always a smaller loss than the plane earth 
loss, but it increases markedly with distance, and 
drarnatically after passing the radio horizon. 


Diffraction loss is almost always calculated and 
applied to the plane earth loss, even over short 
path distances where it may be less than IdB and 
seemingly not significant. 


After a few miles, it is always significant, even 
within line of sight, and must be added to the 
plane earth loss to gain a reasonably accurate 
esumate of the total path loss. 


Diffraction loss ty best understood es that portion 

of loss due exelucivehs t ve, Таом 
"bent" waves continue ^o Ф Йа anc lose strength 
as they travel, anc шне anc time ск 


subject t6 the influcnees ol Plane wh lois. 


Lus. өрек КЫЛ, avis 
ig Oris t Cul 


QS 
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Untonunately, diffracuon ioss is variable and 


: depends on a number of factors. including terrain 
| characteristics. weather, and atmospheric density. 


Studies have determined two cases for diffraction 
loss that will cover most situations. One is called 
the */,-Earth Radius Diffraction model while the 
other is known as the True Earth Radius 
Diffraction model. 


It is beyond the scope of this book to dig deeply 
into these variables, but the models below are 
reasonably conservative and will cover both good 
and worst cases. 


“оь = 0.064950355(D! #8001208) 


where: 


4 1 : è Я 
/,Qg, = diffraction attenuation, decibels, 
based on a /, earth radius 


D = distance between antennas, miles 
0.08660047 =a “lumped” constant 


1.438001208 = exponent of D, another 
“lumped” constant 


A spreadsheet solution for Diffraction Loss can be 
constructed as follows: Refer Distance (miles) 
between antennas from the Great Circle calculation 
in E47, and enter this formula into E33: 


=E 47% (1.438001208)*0.064950355 


The more conservative (worst-case) diffraction 
model, based on a True Earth radius, is 33% 
greater, or as follows: 


то = 0.086600473(D' 959195) 


Enter this formula into E34: 


=0.08660047*(Е47^1.438001208) 


SHADOW LOSS 


This is another additive toss, vaguely similar to 
Giffraction loss. Here s how н operates. 
Ordinariis. оле would not consider irving tà 
comamanicaie from Рону Ato Point Bio a 
Movin were between the iwo sies. Surprise. 
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but nothing perfectly blocks a radio signal; not 
even mountains. 


Obstacles just attenuate signals much more so than 
the plane earth and diffraction influences. Obstacle 
or shadow attenuation can be rather severe, so 
much so that even modern technology can't 
overcome its effects, but the point is that we can 
quantify and evaluate that loss and know 
something in advance about it. 


A moderate shadow loss can often be overcome 
with simple design techniques or informed 
decisions. Sometimes, a few decibels of shadow 
loss are not important at all; othertimes, extremely 
critical. 


The bottom line is that the compleat scannist 
should know something about shadow loss, and 
how to estimate tt. It's not a major factor, but 
when you're trying to squeeze every last dB from 
a communication channel, it’s potentially 
important. 


The formula is hairy enough that I'll not try to 
explain it, but can be easily applied in two steps, 
as follows: 


(Dor = P = 
10 Logia F + 20 Logio D - 10 Log,, H - 55.8 
where: F = frequency, MHz 
H = effective height of obstacle, ft 


D = distance from obstacle to 
transmitter or receiver, 
shortest, miles 

Ф = result obtained in Step (1) 


e - approx 2.71828182845904 (the 
base of the natural logarithm) 


(0.08534)(Ф) = the exponent of e in Step (2). 


If Qy, equals or exceeds 13dB, you can stop right 
there; the result is an accurate estimate of the 
shadow loss posed by that obstacte. 


If less than 1348, then proceed to Step (2): 


0.08534) P 
(2) Qaa = 4.35459 е rr 


The spreadsheet solution for Shadow Loss is 
constructed as follows: 
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Enter into E24, the Height of the obstacle above 
line of sight in feet. Enter into E25, the Distance 
in miles between the obstacle and either the 
transmitter or the receiver, whichever is the 
shortest; and enter Frequency in MHz into E16. 


Then enter this formula into E29: 


zIF((E24*E25*E16)20,10*LOG(E16) 
*20*LOG(E24)-10*LOG(E25)-55.8,0) 


Cell E29 displays an interim result and no 
attention to it is necessary. Finally, enter this 
formula into E30: 


=1Е((Е24*Е25*Е16)=0,0,1Е(Е29>=13, 
E29, EXP(((10*LOG(E16)+20*LOG(E24) 
-10*LOG(E25)) - 55.8)*(0.08534))* 
4.35459)) 


This shadow loss is added to Plane-Earth Loss 
and Diffraction Loss to obtain the total Path Loss. 


APPLICATION 


Radio waves behave according to physical laws 
just like gravity, mass, momentum, pneumatics, 
hydraulics, combustion, etc. 


The performance of radio waves is predictable to a 
high degree of confidence with the pnmary 
uncertainties falling into categories generally 
beyond mankind's reach of contro] and full 
comprehension. 


Weather is one such variable, which influences the 
diffraction loss by a factor of as much as 33%. 
This variance could amount to 10dB or more, 
which can spell the difference between good 
communications and none at all! 


The formulas for diffraction loss that I gave you 
should cover most contingencies for scanner 
needs anyway. 


In a word, most scanner communications analyses 
will consist of either free-space studies, or a 
combination of two or more of Plane-Earth, 
Diffraction, and Shadow Loss analyses. 


If you will stick with me for a few more pages, 
I'll have you blueprinting your own reception 
radius. You can do it with little more knowledge 
than how to use a calculator or a spreadsheet. The 
hardest part will be constructing the working 
spreadsheet the very first time. After that, it’s 
easy. 
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The fun part is entering the variables, and then 
munching an anchovv pizza with habanero 
(Scotch Bonnet — the hottest there is!!) peppers 
while you ponder the results. This dynamo of a 
spreadsheet will do all the dirty work. 


Here's a brief overview of the process of 
analyzing VHF-UHF radio propagation between 
two points by adding a few more cells to the Great 
Circle Spreadsheet. Refer back to the spreadsheet 
and Technical Structure as we discuss the few 
action items. 


If you want to be slick and professional, enter 
your site name, transmitter site name, your name, 
and the date and time in D11 through D14. Enter 
the frequency, in MHz, into E16. 


We need to know the distance of the path and 
reciprocal bearings between a transmitter and your 
receiver site. Enter the latitude and longitude for 
both sites in C2 through E5 on the worksheet. 


Figure 9-4: Line of sight estimates 


Uncnrrecled Optical Lina xt 
MM M - Corrected Jor True Earth Radius | ..; 


The previous Great Circle spreadsheet has alreadv 
been done! 


Once we know distance (calculated instantly in 
E47), we need to know if there is any chance of 
"line of sight” and any possibility of free-space 
considerations, so let's let the worksheet calculate 
distances to the horizon for each site, and combine 
those distances to produce a maximum possible 
line of sight. 


Requisite data for this and other calculations later 
include the heights of the transmitter and receiving 
antennas, so enter the two antenna heights into 
E17 and E20. These heights are not actual 
heights above ground as you might first think. 
Rather, they're heights above average rerrain. This 
could go either way. 


For instance, suppose your antenna is on a 35 ft 
mast above ground, but your local ground is in a 
20 ft deep gully. 


True Earth 


н) _ 2001002) 
ClsGronce) = 3 


Where: DI = distance (mi) tom A to 
any point between A and B. 
02 = distance (mi) from that 
poi f 
Examples: 01=51 mi & 02=51 mi 
D1210 mi & 02=92 mi 
D1225 mi & 02=77 mi 


BGS _ (2025/7) _ (21010092) 
= 3 3 


=1,203f , =613 ft 
ЕА 


Distance, mi 


m Conclusion: No land mass protrudes above the corrected True Earth Radius line, therefore line of sight exists. 


The most accurate model will call for you to enter 
15 ft as the height of your antenna. On the other 
hand, the NOAA weather station atop Mt. Wilson 
near Los Angeies sits at 5.710 ft AMSL (above 
mea sea level) My Jocubon is on a 370 ft 
KAMOL: mesa wai npo шшен! obstructions of 


any sort. 


Therefore. I reasoned there might be a good 
chance of line of sight. Not sure of NOAA's 
antenna height above ground, I entered 5710'in 
E20 and 470' + 20' mast = 500 fi ror mv antenna 
neight into E17. The calculations for iine of sight 
in сен E44-E46 suggest a maximum LOS of 
about 138 miles in E46. The calculated path 
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distance of 102 miles in E47 seems to bear out 
the probability of line of sight. Grear/ 


This is a good point to do a little terrain analysis. 
Tt can be as simple as stepping outside and taking 
a look around. or as involved as scribing the radio 
path over a series of pasted-up USGS topo maps 
and plotting a contour graph of ali elevations 
between the two points. 


There is a simple approach to evaluating this “Tine 
of sight" thing a little better. You can do it on a flat 
graph sheet, too! Some engineers prefer a special 
curved map, but anything with grid marks will 
do... plain old graph paper. 


ENTRIES 


This figure isn't real-life accurate because I didn't 
want to take the time to analyze a 102 mile path 
that is line of sight anyway. 


The idea is to plot an elevation profile on a flat 
gnd as you see jin Figure 9-4 and then correct the 
flatness to the earth's curve by means of the 
Clearance formula. 


Draw a straight line between Points A and B on a 
topo map or other map that offers elevation data. 
Set a scale to your grid as I did above, and plot the 
elevations of A and B. 


Then follow the straight line you drew on the 
map(s) and plot the higher elevations between А 
and B. 


Draw a straight line on the graph between A and 
B. This is the flat-earth optical sight line. If any 
land mass protrudes into that line. you 
unconditionally do not have line of sight. If a 
landmass or object comes near the optical line, 
then you still may not have line of sight. 


That's where the True Earth Radius Clearance 
correction comes into play. Any given point on the 
line between A and B must have the required TE 
Clearance beneath it, in order to have line of sight. 


The examples above show that greatest clearance 
of 1,734 feet is required at the 51/51-mile mark 
and 613 feet at the 10/92 mile marks, and 1,283- 
feet at the 25/77 mile marks. 


Drop a line straight down from the optical line 
scaled to the requisite clearance, and if does not hit 
or protrude into an obstacle or land mass. then 
you have line of sight and probably a free-space 
path. You will see with a little study that the least 
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required clearance is at either end of the path, and 
maximum is in the middle. 


Enter in Cells E18 and E21, the GAIN figures in 
dB for your antenna and for the transmitter 
antenna. 


If you use a discone or other wideband antenna, 
the gain will be zero at best, and quite possibly as 
low as -1 to -SdB. Start with OdB anyway. If you 
use a higher performance antenna, refer to its 
specs for the GATN rating, in dB. 


Most transmitters of a professiona) or business 

nature use antennas with anywhere from 3dB to 
9dB of gain, with about 6dB typical. Start with 
6dB if you're not sure. 


Enter into Cells E19 and E22 an estimate of 
miscellaneous losses at each site. For your station, 
use the loss factor of your coax cable plus one 
additional dB. 


The casual hobbyist will have anywhere from 3dB 
to 10dB of loss between the antenna and scanner. 


Figure yours out, or enter SdB as a rough 
estimate, Professional and commercia) sites 
minimize their losses because of the monetary cost 
of waste. Allow 1-2 dB of loss at the Tx site. 


It's helpful to know the transmitter’s power 
authorization. NOAA Weather stations typically 
use 100 watts as do repeaters in Public Safety. 
Business transmitters range from 5 watts to 25 
watts. 


When in doubt, enter (into E23) I watt for 

‚ handhelds, 3 watts for cellular mobiles and bases. 
5 watts for other mobiles, and 25 watts for aif 
other bases. Errors are likely to be on the 
conservative side, and therefore more acceptable 
from a results viewpoint even if they're not perfect 
from an engineering and technical perspective. 


Now you need to analyze any obstacles that тау 
be in the path between your receiver antenna and 
the remote transmitter. If there is an obstacle, enter 
its height in feet above the line of sight into E24 
and the shortest distance to that obstacle, whether 
relative to A or B, into E25, 


Height of the obstacle is not necessarily its height 
above ground; rather, the height into which it 
penetrates above the corrected optical line shown 
in Figure 9-4. A 1,000 ft obstacle that penetrates 
only 100 ft into the optical zone is a 100 ft 
obstacle: not 1.000 ft, you see. 


That's it! 
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About the time you enter that fast number into 
E25, the entire Bearing, Distance, and Radio 
Propagation analysis will be waiting for you at the 
bottom of the page! 


Now let's set up the worksheet so you can get 
down to brass tacks. Believe me, it will be worth 
your time and trouble to give this thing a shot, 
even if you don’t have the foggiest idea of what 
I'm talking about so far. 


This thing is awesome and wi]l remove much of 
the mystery and black magic of radio for you in 
due ume. And... without it, the Ultimate Scanner 
might rust, or begin leaking, or smell even worse. 


FURTHER SPREADSHEET 
EXPLANATION 


Most spreadsheets work virtually instantly. 


When you enter a new value in a cell that is 
referred to by any of the resident formulas, a 
calculation takes place instantly to change all the 
outputs that depend on the cell that was changed. 
One changed entry 2 multiple results. 


That is just right for WHAT IF situations where 
you need rapid feedback. 


I remember my VHF-UHF days in the late 70's as 
a junior engineer. when I performed all these 
calculations by hand using a 4-function calculator 
and huge tables of trigonometric and logarithmic 
functions. 


As a matter of fact, I even used a slide rule to 
better advantage than those old calculators. A 
single iteration of a radio link design was arduous 
enough, but then to conduct a WHAT-IF analysis 
sometimes took hours! 


In July, 1979, Hewlett-Packard introduced their 
HP-41C Programmable Calculator — which 
forever changed my life. 


Tt wasn't long before I ran these same calculations 
on an automated basis, reducing to minutes the 
time needed for WHAT-IF analysis. Now my 
spreadsheet will do it in seconds, even on the 
slowest computers. 


The output/results of my Bearing-Distance & 
VHF-UHF Propagation Spreadsheet might well 
confuse many of you. Forget the confusion. Any 
part of it that you do understand will be better thàn 
nothing at all and/or the old ways. 


Stick with ir, and in due time you will become less 
confused. A little longer and you']l be explaining 


| it to others. 


Meanwhile. there is another thing you should 
understand: RECEIVED SIGNAL LEVEL (RSL) 
as expressed in microvolts (nV). LuV js one- 
millionth of a volt of signal, which is pretty much 
the stated specification of most VHF-UHF 
scanners. 


In practice, scanners can detect signals as weak as 
0.1u V, albeit with a lot of noise. Full quieting 
occurs in most scanners somewhere between 
O.SUV and 24V. 


So use my spreadsheet for all it's worth to help 
you understand why certain signals are hard or 
impossible to receive and what lengths you must 
go to 1n order to pul! them in. 


This spreadsheet produces interesting and useful 
output data starting at E27 where the transmitter 
power you entered as warts in E23 gets converted 
to decibels relative to 1 wart (dBW) in E27. 


Just for play and practice, enter a variety of 
numbers, one at a time, into E23 and watch the 
changes in E27. This alone can enhance your 
understanding of decibels (dB), logarithms, and 
basic ratios! 


E28 is ihe sum of all path GAINs at both the 
receiver site as well as at the transmitter site. This 
isn’t especially a very useful bit of data, but its 
there for a quick glance. 


E29 should be completely disregarded; it has no 
meaning to you at all but is used as an interim step 
in calculating the Shadow Loss in E30. 


If you enter a 0 in either or both of E24-E2S, 
then E30 wil) return zero as the shadow loss. 


Plane-Earth Loss is calculated and displayed in 
ЕЗ1. 


E32 calculates and displays free-space loss which 
may or may not apply, but is useful in evaluating 
the best-case-possible performance from a given 
radio link. 


E33 calculates a diffraction loss based on a 33% 
greater RF line of sight than optical line of sight 
(7, Earth radius). 


Weather and terrain conditions can and do vary 
diffraction loss, so this "typical" case is available 
for view and later considerations. 


Fun Stuff 


E34 calculates a diffraction loss based on actual 
earth's curve. Any given VHF-UHF radio link 
can be influenced by varying levels of diffraction 
from one day to the next. 


I'm sure you've heard the same station with 
strong signals at times and rather weak at other 
times. Variable diffraction caused by atmospheric 
changes 1s the probable cause. 


So. we calculate BOTH extremes of diffraction to 
see the range of signals we're most likely to 
encounter. 


Cells E35-E37 totalize the above losses into three 
separate categories, with E35 a sum of free space 
loss plus local system losses. 


Unless you have obvious line of sight with a 
distant transmitter, that figure will prove to be an 
elusive "best case" with a low probability of ever 
coming close. 


It will be valid for real free-space paths, like for 

ground-to-aircraft, etc. If you know a given path 
is line of sight, then you can rely heavily on this 
number. 


E36 is a sum of Plane-Earth Loss, local system 
losses, shadow losses, if any, and the */, Earth 
radius diffraction loss. 


This tota] system loss number in E36 is a lot more 
than the free space loss, but less than the loss that 
can occur in a worst-case scenario, so this one 
might be viewed as "typical" or “normal.” 


E37 is a total system loss based on a sum of 
Plane-Earth Loss. iocal system losses, shadow 
losses, if any, and the True Earth radius 
diffraction Joss (optical Jine of sight). This total 
loss can be severe, and should be considered a 
worst-case scenario. 


Cells E38-E40 present anticipated received 
power levels in dB below | watt (dBW). You're 
not really interested in these numbers right now, 
but they are important to cells E41-E43 which 
produce the meat ‘n taters output for the time 
being, with RSL’s calculated in microvolts (p V). 


E41 calculates expected RSL based on a free- 
space path which may or may not be the actual 
case. The spreadsheet cannot "know" if free space 
conditions actually exist, so it just calculates a 
“best case" and lets you interpret it as vou see fit. 


Cell E42 calculates an RSL based on a “more 
likely" case and E43 calculates RSL in a “worst 
case” scenario. Among these three possible 
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| scenarios, you will get a feel for what should be 


the case at your site. 


E44-E46 calculate maximum possible lines of 
sight to help you determine the type of radio path 
you're evaluating. E44 calculates the distance to 
the theoretical horizon for Site A. 


E45 calculates the same for Site B, and E45 
sums the two, for a maximum possible line of 
sight distance. 


To get a feel for reality, look at EA7, the actuaí 
path distance. If E47 is less than E46, there is a 
possibility for line of sight and maybe a free space 
path. If E47 is equal to or greater than E46, there 
is almost no chance at all for a free-space path. 


Cells E44-E46 and E47 can go a long way toward 
helping you determine the kind of path that exists 
between your site and the target signal source. 


After that, call into play topo maps and your 
knowledge of the regional terrain to make a final 
assessment. 


Cells E49, E50, C52-E52, and С53-Е53, 
present the reciprocal directions of Sites A and B, 
with respect to True North. E49-50 are in 
decimal degrees while С52-Е52 and С53-Е53 
are in DD MM SS format. 


BACK TO THE BBS 


If you do not want to construct your own 
spreadsheets for whatever reason, these and 
others are available for download from my BBS, 
at (619) 578-9247 after 5:30pm and before 
1:30pm, Pacific Time. 


The file is SPRED ZIP. 


TRUE NORTH 


The matter of “True North" may need some 
clarification, with respect to “Magnetic North." 
You see, the magnetic poles and the real poles of 
the Earth are not the same. Compasses, of course, 
rely on the magnetic poles for reference, but 
navigation and especially distances and bearings 
are unilaterally computed and presented with 
respect to the true poles, or True North. 


If you have never seen or identified the Pole Star. 
North Star, or Polaris — whatever you want co call 
it — it's about time you did so. Look at Figure 9-5. 
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Polaris can be seen on a relauvely ciear mgn ma 
True North direction from most any where in the 
northern hemisphere. Jts angle above the horizon 
is equal to the latitude of the observation point. 


Figure 9-5: Polaris, the Pole Star 


ali? 
255 - Polaris 
M 


Angles are with respect 
to local-horizon. 


North Pole 
90° 


From my location, it's 34° up from the horizon. If 
your latitude is 45°, then Polaris will be true north 


of you, exactly halfway ир (45°) between your 
honzon and straight overhead. See Figure 9-5. 


Polaris, the North Star (aka lots of things), has 
provided a True North reference since the dawn of 
history. You may as well use it, too. 


All other stars in the sky "move" through the 
course of the night as our planet rotates. Not 
Polaris; it's immovable, day and night! Why is it 
“stationary?” Imagine an axle running through the 
earth. As it rotates about that axle, an object that 
lies on that axle remains stationary. It's a fine 
reference... 


Whatever worked for the ancient Phoenicians 1s 
good enough for me. 


THE END... 
[f you stuck with me to the end, you're hardcore! 
{ hope you’)! agree it's been fun. It certainty has 


| been to me. It’s also incomplete. I admit it. By the 


urne you read this there will be scanners out there 
that aren't covered in this book. and there are 
certainly mods that aren't covered. 


But there's a solution. Fm like the spider at the 
center of the web. The information comes in and 
goes out ат an amazing pace, and f see all of it! 


Cyberspace provides my primary data input 
channels (BBS and the Internet). Use them, and 
you'll keep me up to date. The World Scanner 
Report is my primary output channel. Subscribe to 
that and ГЇЇ keep vou up to date. 


And meanwhile. 1 hope you enjoyed yourself. and 
that this book helps you increase the pleasure you 
get from our hobby. 


Жол ultr inve WONG LY Y SET А Саса л EN n UNES E ee a AC eee ЛОК АЛДА AUC таа артрит EN Spur 


Great Boogley Woogley! 


Руе gotta stop writing. My publisher just broke in. menacingly waving a wicked- 
looking pistol with a barrel so big you could stick a mop handle in it, shouting something 
about "I'M GONNA SHOOT THE ENGINEER!” If I don't push the print key and back 
slowly away from my keyboard, this might be my last book! 


So T gotta go, but this is not the end by any stretch of the imagination. You have 
learned by now that The Ultimate Scanner isn't the "final word" in our hobby. Rather. 
it's the first word of a new generation, in which a scanner isn't ultimate unless а 
computer is part of it. So, there's more coming. Lots more. This book was like that Joke 
about a thousand attorneys at the bottom of the Pacific. Remember? It's "just a good 
start." You guys ‘n gals have to let my publisher know if you want more so he'll begin 
nagging me for it. 


Meanwhile, let me leave you with a thought... and a chance: 


First, the thought. Most of the scanner mod crowd is interested in the PRO- 
2004/5/6, 2035 and the PRO-43, and for good reason, so they get the majority of my 
attention. This might disappoint those looking for specific help for their SnakeBiteXR- 
871-YMU hardware. Well, I can do something about that if you tell me what you want, 
and if there's a sufficient volume of requests for that particular material. Its up to you. I 
apologize if you and your turnip feel slighted; please re-read Chapter 2. 


So here's your chance: ask me to write a concise, economical Hack Report for 
your favorite scanner. List anything that would be useful to you and that you know isn't 
impossible, but don't get carried away because blood (and performance) won't come 
from Turnips. I will keep a database of those requests and work up documents for the 
more popular rigs. These wil] be simple, no-frills, modestly-priced reports with nothing 
but hard-core hacks for specific scanners. 


Vote as many as you want, but do it as soon as you read this. Oh yes, I almost 
forgot The Test. This book has a certain number of deliberate errors in it, just for you 
perfectionists. When you find any, please let me know so we can properly grade your 
perfocmance. Of course, I don't want to make it too easy for you as time goes by, so any 
mistake that gets found quickly wil! be corrected in the first revision. Let me hear from 
you via Internet (two ways), FidoNet, Compuserve, BBS, or (gasp!) U. S. Postal Service 
— check Chapter 1. Don't say there's no way to reach me! 


Bild Cheek 
San Diego, Сом. 
April, 144 


GLOSSARY 


p- 
1.25-meter 
2-meter 
6-meter 
75-cm 

AC 


active 
antenna 


AM 


amateur radio 


amplifier 


amplitude 


analog 


angels 


approach 


approach 
control 


Nano 

Micro 

Pico 

Ham band from 222-225 MHz. 
Ham band from 144-148 MHz. 
Ham band from 50-54 MHz. 
Ham band from 420-450 MHz 


Alternating current: flows in one 
direction for a period of time, and then 
reverses and flows in the opposite 
direction, usually for the same period of 
time. Reversal is rarely instantaneous. 
Time is required for a point on a wave to 
increase or decrease in strength or 
intensity. When the period of increase 
and decrease is repetitious, the wave is 
said to have a frequency equal to the 
reciprocal of the period of one 
repetition. [f the period of a wave is 
0.0167 sec (16.7 msec), its frequency 
will be 60 Hz. or 60 cycles per second. 


Combined antenna and preamplifier. If 
the preamplifier 15 good enough (GaAs 
FET. for instance) it may improve 
performance. 


Amplitude Modulation. Also, refers to 
the entertainment broadcast band from 
559-1650 kHz. 


The hobby, defined bv the FCC. Dou't 
fet the name deceive: this hobby is 
comprised of unpaid professionals. and 
has amassed a pool of knowledge 
available nowherc else. 


Active circuit element that increases 
power, voltage, or both of an electrical 
signal. 


Voltage or power of an elecirical 
signal. Each has it own units of 
measurement. 


Data storage and transmission 
techniques where any value whatever 
can be defined. Generally. this is the 
real world, so human perception and 
processing is in analog form. 


Military term foc altitude in tens of 
thousands of feet, as in "Angels 40." 
which means 40,000". 


Path of an aircraft from final navigation 
point to touchdown. 


Traffic management facility that 
controls aircraft approaching an airport 
for landing. 


ARTCC 
ASIC 


ATC 


attenuation 
aviation band 


bank 


bearing 


bingo 


birdie 


BNC 


bogie 


broadcast 
band 


Bulletin 
Board 
System 
(BBS) 


Bullington 


butcher 
brigade 


capacitance 


capacitor 


Air Route Traffic Control Center 


Application -Specific-Integrated- 
Circuit, which embodies proprietary 
circuitry in one device. Available only 
to the "owner," and not usually 
available over the counter. 


Air Traffic Control. Primary enroute air 
traffic management agency, with area 
centers linked by radio. landline, and 
computer. 


Reduction of strength or intensity; 
weaken 


118-137 MHz (military is 225-400 
MH2) 


Array of frequencies in a scanner, 
usually associated with one of the 
number keys. 


Compass direction between two points, 
used for angulated location-finding of 
radio signal emitters. 


{n military aviation, return to base. 
Ahernatively, to shift lo a backup 
frequency. as in "eo to channel white, 
bingo геа." 


Signal generated within or by the 
tuning mechanism that deceives ihe 
radio into stopping the scan. 


Common antenna connector, twist to 
lock. 


Unidentified aircraft spotted by one of 
the good guys, or by ground radar 
“You have a bogie at two o'clock. ten 
miles.” 


550 - 1650 KHz, amplitude modulation. 


Computer+phone+software, permits 
modem-equipped callers to leave and 
receive messages, load and donate 
software. etc. 


Kenneth B.. father (or at least uncle) of 
VHF/UHF propagation modeling 


А class of wannabe backers who do 
more harm than good, and then send me 
the result with a $5 bill, to "fix" 


Storage capacity of a capacitar for an 
etectron charge; in Farads (F) more 
commonly expressed as microFarads 
(uF) or picofarads (pF) 

Reactive circuit component that stores 


energy, or passes an alternating signal 
while blocking a non-alternating one. 


252 


cellular 


cellular band 
center 


clearance 


coaxial cable 


("coax") 


Communi- 
cations Act 
of 1934 


compressive 
receiver 


couch potato 
counter 


crystal 


CT-2 


current 


Cw 


data logger 


DC 


Mobile telephony, where the portable 
radio communicates with radios each 
commanding a “cell,” with cells 
connected with the plain old telephone 
system “POTS.” 


869-894 MHz. 
See ARTCC 


The instructions given to a pilot as to 
route and altitude profile from departure 
to destination. 


Cable consisting of outer insulating 
sheath. flexible wire or foil layer, 
another insulating layer, and a central 
wire conductor. Used for low-loss radio 
frequency connections, typically with 
BNC connectors. 


Legislation designed to give the FCC 
control over the airwaves, and to limit 
certain types of activity by requtring 
licensing and protocol compliance. 
Amended in 1989 to raise forfeiture 
limits that the FCC can impose. 


А sort of scanner. whereby a large 
segment of the spectrum is received and 
examined for signals. 


One who needs a little goading to 
launch an enterprise: Hacker-precursor. 


Electrical 100l that can receive a signal 
and display its frequency. 


Common frequency selection or tuning 
mechamsm for single frequency or few- 
frequency radios. 


Second generation cordless phones, 
usually with bitstream or spread 
spectrum digital encoding of voice. 


Quantity or volume of electron Now: 
expressed in amperes or amps (A }. 

| ampere is equal to a flow of | coulomb 
of charge through 10 in | sec 


Conunuous Wave. or Carrier Wave. 
without modulation. 


Extended-operation tape recorder. set up 
to turn on when signals are detected by 
the scanning receiver. After recozding 
that communication, the unil tums off 
and awaits the next one. 


Direct cucrent. flows in one direcuon 
only. When the strength of a DC 
sufrent varies with time, say from 0 
volts to 5 volts and back to О valts. at 
some penodicity or interval, this 15 
said to be an alternanng DC. the 
characteristics of which are very much 
like those af АС. especiallv. with 
respect 10 mathematicai analysis, 
Therefore, an alternaung waveform cán 
stili be direct current, if it flows in one 
direction only, it 15 not AC. 


decibel 


delay 


demodulator 


departure 
control 


diffraction 


digital 


diode 


DIP 


dipole 


direct- 
frequency 
tuning 
directional 


dispatch 


Doppler 


Down- 
converter 


DPDT 


DPST 
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"dB" Unit of power ratio, expressed 
logarithmically. Ten times the 
logarithm of a ratio of two power levels 


= 10 Login Poad Pin) 


Scanner funcion, usually selectable. 
whereby the unit remains on frequency 
for perhaps two seconds following 
reception of a signal, thus permitting 
reception of the response to it. 


Receiver circuitry that extracts 
information from a radio signal. 


Traffic management facility that 
controls aircraft after takeoff but still in 
the loca! contro! area. 


Apparent bending of electromagnetic 
waves in the passage across any 
irregularity or feature, resulting from 
reduction in coherence of Lhe wave as it 
bends to "follow" the shape. The earth 
itself diffracts radio waves. 


Data coding, storage, and transmission 
technique whereby information is 
reduced to expressions constructed 
using only two symbols (for 
convenience, "1" and "0." though could 
just as easily be "on" and "off," or 
"green" and “Pontiac.” A digital signal 
can only express a value in discrete 
increments, while an analog signal can 
express any value. A convenience, used 
in computing. 


Circuit element that permits eleciricily 
to flow in only one direction. 


Dual In-line Package; generally 
describes the common IC socket, with 
(wa rows of aligned pins. 


The simplest directional antenna. A TV 
"rabbit ears" antenna is a dipole. 


Enables tuning a frequency by literally 
entering the numbers that define il 
rather than tuning a "dial." 


Antenna with. greater sensitivity in 
some direcuons and less in others. 


Refers to channels and functions that 
control. vehicle movement. 


Phenomenon whereby a frequency 
appears to change as the transmitter and 
receiver approach or separate. 


Accessory that receives (tvpically) 
800-900 MHz cellular and public 
service signals and converts them to 
frequencies tunable by a scanner thal 
otherwise would not be able to operate 
in that band 


Double pole. double throw: two SPDT 
switches in onc unit 


Double pole, single throw: two SPST 
switches in one unit 


Glossary 


DIMF 


duplex 


DVM 


DX 


dynamic 
range 


ECPA 


ELF 


Ether 
"gtber" 


femto- 


FIDO 


flare 


flight level 


FM 


Free Space 
Loss 


frequency 


frequency 
steps 


fundamental 


Dual Tone Multi Frequency: the audio 
heard when a phone key is touched. 
Made up of Iwo specific iones, with 
each pair corresponding 10 a number ог 
function. 


In two-way communications, duplcx 
permits both aides to speak 
simultaneously. as over the common 
telephone. 


Digital Volt Meter. Perhaps the most 
useful single tool in electromes. 
Typical units measurc AC/DC voltage, 
current, resistance, and а few measure 
inductance and/or capacitance as well. 


In amateuc radio, "extended distance." 


Signal strength limits between which 
the unit will operate satisfactorily 
without malfunction, and refers to range 
between weakest signal detectable and 
strongest signal that will not produce 
overwhelming intermodulation and 
distortion 


Electronic Communications Privacy 
Act of 1986, designed to prevent 
eavesdropping upon cellular and 
cordicss phones. though the laner 
coverage was reversed by the Supreme 
Courl. 


Extremely Low Frequency band, from 0 
Hz to 6 kHz. usually used by the Navy 
for submarine communications. 


That medium through which radio 
signals travel. 


Almost none at all. Teeny! Would you 
believe a quadrilionth? 


A network of BBSs, sharing 
information and processing mail for 
members. 


Raising the nose just before touchdown 
to cushion the landing (Navy/Mannc). 
I's called "rouad out" in the USAF. 


Altitude in tens of thousands of feet 
(civilian). 


Frequency Modulation. Also, a term 
used to refer to the high-fidelity 
broadcast band from 88-108 MHz. 


Weakening, or decay. of radio signals 
due solely to distance, in compliance 
with the square-cube law which says 
that as distance doubles, perceived 
power is divided by four. 


Specific point (periodicity of 
vibration, in а way) in the 
electromagnetic spectrum. 


Tuning increments of a digital tuning 
device such as a synthesizer, Also 
called "resolution." 


A single-frequency signal, with neither 
harmonics nor subharmonics. 
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gain 


GHz 


glop 


gloppy 
Great Circle 


ground 
control 


ground plane 


guard 


guard band 


Hacker 


Hacker's Law 
handheld 


harmonic 


Hertz 


HF 


Increase in effective radiated power (in a 
transmitter) or receptivity (receiver), 
when compared to omnidirectional 
antennas or passive circuitry. 


Gigahertz: billion hertz: 
1.000.000.000 Hz; 1,000 MHz: 
1.000.000 КН2: 1 GHz 


A small gob. usually used in reference 
to silicone adhesivc/seal; about 1.77cc 


Of or having to do with a glop 


shortest arc distance between two 
poinis on the surface of the earth 


Airport facility that controls and 
coordinates taxiing aircraft and. vehicle 
traffic. 


Conductive or electrically reflective 
surface under an antenna to serve as an 
artificial) earth ground. Also, layer 
within a printed circuit board that acts 
to reduce energy radiated from one side 
Іо the other side. 


А term that denotes emergency aviation 
frequencies, always monitored by all 
aircraft and by all ground control 
agencies. VHF - 121.5 MHz, UHF - 
243.0 MHz. 


"Margin" nexi to a selected frequency. 
Extra room to prevent adjacent channel 
interference. 


One who adapts, modifies, or alters an 
објесі of any sort to meet new needs, 
applications, and/or specifications not 
anticipated or intended by the original 
manufacturer. The “war dialer” 
cybergang lent this term a nasty 
connotation. Not only that. but the 
legion of computer hackers desperately 
tries tu claim the word for themselves. 
Computer hackers are johnny-come- 
latelv's. Hardware hacking has been a 
major pursuit for a lot longer ihan 
computers and war dialers have been 
around. Hacking is an honorable 
enterprise. Anything ever made by а 
manufacturer can be made beiter by a 
Hacker. In person, a Hacker can be 
identified by good looks, high IQ. апа 
incredible agility. 


"Murphy was an optimist.” 


Small, portable, battery-operated 
device, used to refer 10 radios. 


A frequency exactly twice that of a 
"fundamenta!" frequency, which appears 
and disappears as the fundamental is 
switched on and off, thereby proving a 
relationship. 


Unit of frequency; one cycle ог 
repetition per second; 1 Hz 


High frequency band, most-used by 
hams. 
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IC 


IFR 


image 


impedance 


inductance 


inductor 


inquiry 
Inter- 
modulation 


"intermod" 


keylock 
kHz 
lambda (A) 
latitude 


LF 
lockout 


logic 


ongitude 


loop 
LSB 


Mayday! 


Integrated circuit; a circuit “printed” ia 
semiconductor material on a substrate, 
usually of silicon. An IC сап contain 
hundreds of thousands of transistors and 
other devices. connected by 
microscopic ctrcuitry (^wiring") 


Instrument Fiight Rules. where a ground 
facility maintains clearance between 
the aircraft and ground, other aircraft, 
сіс. Under IFR. the pilot often fies 
"blind." 


When the received signal is 
downconverted to an íntermediate 
frequency. an "image" js generated al 
twice that number. 


Identical to resistance, except inclusive 
of resistive, inductive and capacilive 
opposition, restriction or hindrance to 
electron flow: expressed in Ohms (О), 
}Q2 1s the 1mpedance through which 1 
amp will flow at a force of 1 volt 


Storage capacity of an inductor for a 
тарпепс field: expressed in Henries (Н) 
commonly expressed ín milliHenrys 
(mH) or microhenries (tH) 


Reactive circuit component that passes 
a non-alternating signal while 
blocking an alternating one. 


Refers to channels used for questions. 


The new frequency products (sum and 
difference) when two signals are mixed. 
These are new frequencies, detected as 
radio signals. and therefore generate 
birdies and fool the scan mechanism 
Into stopping. 

Switch or lever that prevents 
inadvertent keyboard entries 


Kilohertz; thousand hertz: 1000 Hz; 1 
kHz 


Greek symbol used to denote 
wavelength. 


Distance from the equator or pole, 
expressed in degrees N or S 

Low Frequency band, from 30-300 KHz. 
Scanner feature that skips past 
undesired frequencies or channels 


Integrated circuils that comprise the 
thinking mechanisms of a computer 


Position east or west, in degrees, from a 
great circle connecting the poles and 
passing through Greenwich, England 


Simple directional antenna 
Lower Sideband. A derivative of SSB 
where the carrier and upper sideband are 


suppressed, and information ıs carried 
only on the lawer sideband 


[n aviation. EMERGENCY 


MF 


MHz 

micro- 

míero- 
processor 

microwave 


milli- 


mobile 


modulation 
modulator 
monitor 


MTSO 


Murphy’s 
Law 


nano- 


NOAA 


non-volatile 


NSA 


octave 


omni- 


directional 


omnibus 


oscilloscope 


pan 


PCB 
PCN 
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Medium Frequency band. from 300 kHz 
to 3 MHz. Includes the common "AM" 
broadcast band. 


Megahertz; million bertz: 1,000,000 
Hz. 1,000 kHz = 1 MHz 


Verb. greha far “millionth 


Alsc нш, the computer's brain, 
consisting of 21; array of logic. 


Anything above 2 GHz in frequency. 


verba! prefix for the fractional 
expression, “thousandth”: x10" 


Intended for vehicle installation. 


The means by which information is 
impressed on a fundamental radio signal 


Transmitter circuitry that imposes 
information upon a radio signal 


Scanner function that stores a frequency 
of interest found by searching 


Mobile Telephone Switching Office. 
which connects the cellutar cell radios 
with the telephone system 


"If anything can possibly break or go 
wrong. it will do so" 

Verbal prefix for the fractional 
expression, "billionth"; x10” 


Nauonal Oceanographic and 
Atmospheric Administration: weather 
alert service. 


Refers to memory. Non-volatile retains 
information even when power is 
removed. 


National Security Agency, at Fon 
George G. Meade, between Baltimore 
and Washington DC. 


The range from any frequency to exactly 
twice that frequency, both in audio and 
іп radio. 

Refers to antennas with equal 

sensitivity to signals from every 
direction. 


Originally called the Omnibus Crime 
Control] and Safe Streets Act of 1968. 
attempts to control eavesdropping by 
establishing penalties. 


Second most important RF test 
instrument (after DVM/VOM ). displays 
waveforms in the time domain. That is, 
it shows relationships between time 
and amplitude (voltage) of a signal. 


In aviation, deferred emergency (seldom 
heard) 


Printed circuii board 


Personal Communication Network (also 
Personal Communication System). 
from 902-928MHz, also in low- 
microwave (1.8GHz), and al 5.4GHz. 


Glossary 


PCS 

phase noise 
pico- 
pin-line 


pirate radio 


POTS 


power 


preamplifier 


priority 


propagation 
prototype 
public safety 


quartz 
"quartz- 
lock" 


range 


repeater 


res:stanee 


resistance 


Personal Communication Systems (see 
PCN) 


Specification that identifies the quality 
of the signal used to tune the 
radio/scanner. hence the sclectivity. 


Verbal prefix for “trillionth” 


Plugs or sockets ~ resembles half an IC 
socket, all pins in a straight line, 
generally one-tenth of an inch. center- 
to-center. lop end is usually female, and 
bottom is usually male. The metal pins 
are machined in lieu ot stamped and 
therefore, the males make a perfect fit 
with the females. Prn-lines can be made 
to serve as IC sockels, transistor 
sockets. quick-disconnect plugs & 
sockels. etc. 


Unlicensed. unauthorized broadcasts, 
usually political or entertainment, 
often from ships al sea, or тот across 
the border. 


Plain Old Telephone Service. 


Energy: current flow through a 
resistance: expressed in Watts (W). 

| watt is the energy consumed when } 
voli forces 1 amp through 1 


Also "booster." amplifies radio signals 
and noise. together. 


Scanner function. When a channel is 
designated "pnonty," cvery few 
seconds ihe unit returns to check for 
transmissions on thal frequency. 


Act of the transfer of electromagnetic 
energy Ihrough spacc 


A functional assembly or circuit, but 
nov in final form: subject to revision 


Police, fire, ambulance. rescue, disaster 
relief. and other emergency services. 


Refers to circuit that 1s luned using а 
trequency synthesizer. based upon a 
crystal reference. rather (han а reacbve 
passive circuit. 


That distance over which а мепа! can 
be received by a given set ol factors, 
such a» transmitter amplifier, antenna 
gain a! cach end. and receiver 
омилу. 

A combined receiver anu агазет: цег, on 
зу frequencies, whereby a weak signal 
is тесек ей und ze-trany miti with more 
power. thus increasing rage. 
Consinction ef Now. requiing inat ike 
electrical sunal give up power 0 pass 
Non-capacitive and aon-ainducuve 
opposition, zesiriction or hindrance to 
vectron Now: expressed in Ohms (Qu. 
162 is the resistance thruagh which | 
snp will flow ata force of і vole Also 
sce Unpedance. 


resistor 


RMS 


rosin core 


RTTY 


rubber duck 


scanner 


scannist 


scrambler 


search 


selectivity 


Shadow Loss 


simplex 


spectrum 
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In à circuit, a constriction through 
which electrical energy passes while 
giving up some of ils energy. 


Root-mean-square 


The right solder to use when working 
on anything electronic. “Acid core" 
solder is for plumbing. and should be 
avoided at all costs. 


Radio teletvpe, using the 5-bit 

international Telegraph Aiphabet #2 
(ITA2). Usually ham communication 
below 30 MHz, and at jow data rates. 


Rubber, flexible antenna with which 
most handheld scanners are equipped. 


Radio capable of automatically 
searching for transmissions either 
through the spectrum, or through a pre- 
dcfincd series of frequencies. 


Scanner enthusiast/hobbyist. 
Hopefully will become widely used. 
Secondary definition: а "scannist" is 
handsome, brilliant, and knows almost 
everylhing. 


Means by which a transmission is 
encoded specifically to avoid 
eavesdropping or unauthonzed 
reception. 


Scanner sweeping between preset high 
and Jow frequency limits. 


Scanner specification that indicates the 
units ability to discriminate between 
two signals close together. 


Energy loss due to partial obstacles 
along the line of sight 


In two-way communications, simplex 
is à single path requiring that only one 
"end" speak at a ume 


Single In-line Package: generally 
describes a pin-line socket strip 


Radio energv propagauon that 
“bounces” oft of an jonized 
atmospheric layer. increasing range 
beyond the expected line of sight 


Microwave connectors tha! operale 
over à broader trequency ғ апре than the 
less expensive BNC (connector) 


Singte pcie, double throw. а 3-pin 
switch, one pin common switched to 
either of IMG postions, on-on, off-off 


The delimited range of апу: such 
as color, hardness. eic In the context 
of this book, refers ta a range of 
possible peciodicitics. oc frequencies. 
available to radio and other 
electromagnetic devices. The 
"spectrum" as аа electromagnet term. 
covers any periodicity above DC, to 
hght and beyond. 
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spectrum Instrument that depicis same segment | Turnip An extensiveiv nor -motifjanle scanne” 
i 
ai 4 : " s ү эү ШЕЛ x е ‘i , 
ашлудег af ihe peeun and tie signals getere TVRO Pele Vision. Receive-Only ("satellite 
within iii Display ts in the frequency receiver 
domain, and shows the relationship . | | | 
helween energy and trequency. USB Upper Sideband. One sensative of 
| 3 x AW ees SSB. where the carner and the iower 
spread к ERE wherehy an sideband are suppressed, and 
spectrum integrated digital code ss used to information is carned only on the upper 
chsGnguish the siznal trom other side ani 
energy, allowing tt to be extracted суеп ] m : 
from naise. UTC Universal Coordinated Time (World 
Time). ance called Greenwich Mean 
igs Ж К : ^. б A 
SPSI Mh pole. ee throw. a 2-pin Time. Andi UTC. na UCT 
switch. on-o 
{ Unc anded dii | | VFR Visual Fbght Rules, used when weather 
SPHEX eC is h е6 бек permits, Under УРЕ, the pilot 
generale d : e Sie maintains his/her own clearance from 
SCIRE ee TQ ИЕ other aircraft, terrain. ctc 
squelch Scanner iade ш in dide УНЕ Very High Frequency band. usually 
dE to ali out Sigue ot desire defined as 30-174 MHz. 
amplitude. _ 
SSB Sasso edebant dui Victor Term used to (denuty standard numbered 
x TEE h Bri : baat oak : airways, as in "cleared to X-ray on 
strateg А, гше prumarvecsrpe rus Victor 33.” Rather like an interstuic 
AERIS SSS highway system al 36.000". 
Я ERR А : ] 
SSTV Slow-scan ТУ. a hobbyist method ol VLF Very Low Frequency band, from 6 to 30 
transmitüng video smages using kHz 
relauvely low data rates and narrow | i 1 
bandwidth, volatile Refers to memory. Volatile memory 
deut . | loses information when power i$ 
state In aviation, reters (о fuc! level. as in 
a а т removed. 
Whats your state? | 
. : . voltage pressure or forec behind electron flow: 
Sw We : А 
SWAT Special Weapons and Tactics. expressed in volts: | volt is the force 
synthesizer Tuning device that can generate many required to push | amp through a 
"frequency precision frequencies, each locked to a resisiance of 1Q 
synthesizer" 94112 crystal reference, VSAT Very Small Aperture Terminal. refers to 
TA In aviation. a traffic advisory either satellite or terrestrial (point-to- 
(tango alpha) ^ point) telecommunication terminals 
tabletop Term ed io desc ribe a scanner (or any wavelength Distance between two corresponding 
hobby radio) intended for hase station points та a signal's repetitive wavetorm 
operation. whip Simple amenna. A straight piece of 
К | 2 ) 
Telephone 1992 federal iegtslation. originally wire. usually of a calculate *ength. 
Disclosure proposed to control abuse of 900- yagi Complex directional antenna, with 
& Dispute numbers, but with addenda that cause long. narrow, high-gain pattern, А 
Resolution the FCC to restrict sale/Import of rooftop TV antenna is somewhat like a 
Act celinlar-capable scanners. yagi. 
trunking Public safety and industrial radio zulu Refers to Greenwich Mcan Time (at 
system nelwork where a bank of frequencies ts Greenwich, England), also "UTC." 
available to all stations. and traffic is 
controlled by a computer that 
commuincates over a management 
channel 
Turbo- Extensively modified scanner, usually 


Whopper 


with lealber seats and a Momo whee! 


Resources 


PARTS & SUPPLIES 


ACTIVE 

PO BOX 9100 

WESTBOROUGH, MA 015B1 
800-343-0874 

ELECTRONIC COMPONENTS SUPPLIES 


ALL ELECTRONICS CORP 

PO BOX 567 

VAN NUYS, СА 91408 

800-826-5432 213-380-8000 800-258-6666 
ELECTRONIC COMPONENTS, EQUIPMENT 


ALLIED ELECTRONICS 

401 E 8TH ST 

FORT WORTH, TX 76102 

ELEX COMPONENTS, EQUIPMENT & SUPPLIES 


ALPHA WIRE CORPORATION 
711 LIDGERWOOD AVENUE 
EL(ZABETH, NJ 07207 
201-925-8000 

COAX, WIRE & CABLE 


AMIDON ASSOCIATES 

2216 E GLAOWICK ST 

DOMINQUEZ HILLS, СА 90220 
213-763-5770 FAX 213-763-2250 
POWDERED IRON CORES & COILS FOR RF 
APPLICATIONS 


AMPHENOL PRODUCTS DIVISION 
4300 COMMERCE CT 

LISLE, li 60532 

312-986-2300 

PREMIUM COAX & RF CONNECTORS 


ARROW ELECTRONICS 

767 - 5TH AVENUE 

NEW YORK CITY, NY 10153 

312-397-3440 

ELECTRONIC COMPONENTS, PARTS, SUPPLIES 


AVERA BV. 

4813 BD BREDA 

LIESBOSSTR.2A,, NETHERLANDS 
076-130424 

EURO DSTR OF SEMICONDUCTORS 


BCO ELECTRO 

PO BOX 8301:9 

RICHARDSON, TX 75083 
214-690-1102 

CONNECTORS. IOS COMPUTER ACCY'S 


BELDEN WIRE 5 CABLE 

PO ЕОХ 1980 

RICHMOND., IN 47375 
800-235-3361 317-983-5200 
CRT SPECIAL STS 

20 BOX 347 

SCOTTSCALZz, AZ £5297 


S00-S29-3«'7 

FAECTAONIC PROJET: XTE PARTS 
EGNET САТО ELECTRIC TIRE & cae: 
шене ET 


BRPGEMN PARK UL 20131 
SEZ AERP 


RESOURCES 


CUSTOM COMPONENTS CORP. 

W224 $8445 INDUSTRIAL OR 

BIG BEND, WI 53103 

414-662-5266 

ADAPTORS, CABLES, EXTENSIONS, TEST JIGS 


DAVILYN CORPORATION 

13406 SATICOY ST 

NORTR HOLLYWOOD. CA 91605 
800-235-6222 

ELECTRONIC PARTS & MILITARY SURPLUS 


OAYTON-GRAINGER, INC 

3299 SW 9TH AVE / РОВ 14070 

FORT LAUDERDALE, FL 33315 
604-580-2443 

GENERAL INDUSTRIAL SUPPLY, FANS & 
BLOWERS FOR COOLING 


OERF ELECTRONICS CORP. 

37 PLAIN AVE 

NEW ROCHELLE, NY 10801 
800-431-2912 / 914-235-4600 
ELECTRONIC COMPONENTS, CHIPS. 
TRANSISTORS. CRYSTALS. MORE. 


DIGI-KEY 

HIGHWAY 32 SOUTH / PO BOX 677 

THIEF RIVER FALLS, MN 56701 
800-344-4539 

RATIO SUPPLIES, ELECTRONIC COMPONENTS 


DRAKE, А. L. COMPANY 

PO BOX 3006 

MIAMISBURG, OH 45343 

800-568-3795 513-866-3211 

DRAKE HAM RADIOS, SWL RECEIVERS. FILTERS 
& OTHER RADIO PRODUCTS 


EAST COAST TRANSISTOR 

2 MARLBOROUGH ROAD 

W. HEMPSTEAD. NY 11552 
800-645-3516 

SEMICONDUCTORS & ELECTRONIC PARTS 


ELECTRONICS WAREHOUSE INC. 

PQ BOX 624 

OLD LYME. CT 06371 

203-434-8308 

ELECTRONICS & TECHNICAL TOOLS/SUPPLIES 


GATEWAY ELECTRONICS, (МС. 

9222 CHESAPEAKE 

SAN DIEGO, CA 921'1 

$15-279-5£02 

MIL & COMMERCIAL SURPLUS EQUIP ALSO 
DENVER ST 10015. HOUSTON 


HOSFELT ELECTRONICS, INC 

2700 SUNSET BLVD 

STEL RENVULLE, Он {2952-1158 
100-)24-64&4 FAX &00-524-5414 
EXCELLENT SUPPLIER NEW AND SURPLUS 
ЈА £cz T PÉNIZE 

(355 SHISACWAY ROAD 

SELMON) CA 24602 


115-527-0297 
SEVICONDUC TORS & ELECTIONS Pes WILE 
TEN S SOS. 


JONES, MARLIN P. & ASSOCIATES 

PO BOX 12685 

LAKE PARK, FL 33403-0685 
407-848-8236 FAX 407-884-8764 
COMMERCIAL SURPLUS ELECTRONICS 


KEN'S ELECTRONIC PARTS 

2825 LAKE ST 

KALAMAZOO. М! 49001 

616-345-4609 

CB RADIOS CB ACCESS. ANTENNA MOUNTS 


MALLORY DISTRIBUTOR PRODUCTS COMPANY 
PO BOX 1284 

INDIANAPOLIS. IN. 46206 

317-636-5353 


MCM ELECTRONICS 

858 E. CONGRESS PARK OR 
CENTERVILLE. OH 45459 
800-543-4330 513-434-0031 
ELECTRONIC PARTS & SUPPLIES 


MILLER, JW., INC 

19070 REYES AVE / PO BOX 5825 
COMPTON, CA 90224 

213-537-5200 

RF COILS, TRANSFORMERS, FILTERS 


MINI-CIRCUIT LABS 

PO BOX 166 

BROOKLYN, NY 11235 
718-934-4500 

RF COMPONENTS OF ALL TYPES 


MODUTEC, INC. 

18 MARSHALL ST / PO BOX 778 
NORWALK. CT 06856 
203-853-3636 

ANALOG & DIGITAL PANEL METERS 


MOUSER ELECTRONICS 

11433 WOODSIDE AVE 

SANTEE, CA 92071 

619-449-2222 817-483-4422 
ALSO MANSFIELO, TX 817-483-4422 
COMPONENTS & SUPPLIES 


MURA CORPORATION 

177 CANTIAGUE ROCK RD 

WESTBURY, NY 11590 

516-935-3640 

PANEL METERS. INDICATORS, SPEAKERS 


MURATA-ERIE NORTH AMERICA, LTD 
2200 LAKE PARK DP. 

SMYRNA, GA 30080 

404-436-1300 FAX 404-430-3030 
if FILTERS OF MANY TYPES 


MURATA-ERIE NORTH AMERICA, INC. 
1420 E. EDINGER ST, SUITE 233 
SANTA ANA, CA 02705 
714-835-4522 

CALIFORNIA SAL 75 GFF CE 

NEW TONE ELEST AUHIGS 

42 FAN RAND ST 

ScCOME RLD, Ng Or biG 

28° -746 5089 

RESISTORS & SEMICONSUCTORS 
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NEWARK ELECTRONICS 

5308 W. 124TH ST 

ALSIP, IL 60658 

312-371-9000 

ELECTRONIC COMPONENTS, SUPPLIES & EQ 


NTE 

44 FARRAND ST 

BLOOMFIELD, NJ 07003 

201-748-5089 

SUPPLIER OF NTE-BRAND SEMICONDUCTORS 


ORA ELECTRONICS 

20120 PLUMMER ST / PO BOX 4029 
CHATSWORTH, CA 91313 
800-423-5336 818-701-5850 
JAPANESE SEMICONDUCTORS. ICS 


PALADIN CORPORATION 

3543 OLD CONEJO RD. 4102 

NEWBURY PARK, CA 91320 

805-499-0318 

SOLDER'G & WIRE HANOLING TOOLS. TESTERS 


PARTS EXPRESS INTERNATIONAL 
340 E. FIRST ST 

DAYTON. OH 45402 
800-338-0531 513-222-0173 
ELECTRONIC PARTS & SUPPLIES 


PASTERNACK ENTERPRISES 

PO BOX 16759 

IRVINE, CA 92713 

714-261-1920 

COAX CABLE PRODUCTS, CONNECTORS, MORE 


QUAM-NICHOLS CO. 

234 E. MARQUETTE AD 
CHICAGO. IL 60637 
312-488-5800 

REPLACEMENT & OEM SPEAKERS 


REC LION CONTROLS 

20 WILLOW SPRING CIRCLE 

NEW YORK, PÀ 17402 

717-767-6511 

DIGITAL COUNTERS & INDICATORS, CONTROLS 


REMEE PRODUCTS CORP. 

41 BRIDGE ST 

FLORIDA. NY 10921 
800-431-3864 914-651-4431 
COAX, WIRE & CABLE 


RF PARTS COMPANY 

1320 GRAND AVE 

SAN MARCOS, CA 92069 

619-744-0700 800-854-1927 

POWER DEVICES, LINEAR AMP PARTS, HAM & C8 


SHOKA! FAR EAST {ТО 

280 N. CENTRAL AVE 

HARTSDALE. NY 10530 

914-681-0700 

VERY LARGE IMPORTER OF ELEC EQUIPMENT & 
COMPONENTS 


TUCKER ELECTRONICS 

1717 RESERVE ST. 

GARLAND, TX 75042 

800-527-4642 FAX 214-245-0857 

SURPLUS ELEX TEST EQUIPMENT, COMPUTERS, 
BOOKS, SUPPLIES, AND A FINE CATALOG 


| " 
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WORKMAN ELECTRONIC PRODUCTS. INC 
75 PACKINGHOUSE RD / РО ВОХ 3828 
SARASOTA, FL 33578 

813-371-4242 

SEMICONDUCTORS & RESISTORS 


SCANNERS, RADIO 
EQUIPMENT, ACCESSORIES 


A-8-C COMMUNICATIONS 
17550 15TH AVE NE 
SEATTLE, WA 92065 
206-364-5300 

ICOM, BOOKS, ANTENNAS 


ACE COMMUNICATIONS 

10707 Е 106TH ST 

FISHERS, IN 46038 
800-445-7717 

SCANNERS FROM AOL. ETC. FOR 
SOPHISTICATED USERS 


5710 6000 HOPE ROAD 

MILWAUKEE, Wi 53223 

800-558-0411 

MUCH HOBBY RADIO EQUIPMENT. ALSO IN: 
WICKLIFFE, OH 800-321-3594 
ORLANDO. FL 800-327-1917 
CLEARWATER, FL 813-461-4267 
LAS VEGAS, NV 800-634-6227 
SEATILE, WA 206-767-8170 


AMC SALES. INC 

PO BOX 928 

DOWNEY, CA 90241 

213-869-8519 

FAX 213-923-1478 

LONG PLAY TAPE RECORDERS-SURVEILLANCE 
SECURITY & RADIO USE, VOX 


ANTTRON ANTENNA PRODUCTS 

PO BOX 2744 

YOUNGSTOWN, OH 44607-0744 
216-788-9404 FAX 216-788-7709 
ANTENNAS FOR SCANNERS, CB, & HAM RADIO, 
GREAT SCANNER ANTENNAS) 


ASSOCIATED RADIO 

8012 CONSER, BOX 4327 

OVERLAND PARK, KS 66204 

913-381-5900 FAX 913-648-3020 

NEW & RECONDITIONED RADIO EQUIP. WHSLE 


ATLANTIC HAM RADIO LTD 

368 WILSON AVE 

DOWNSVIEW, ONT M3H 1S9 CANADA 
416-636-3536 

HOBBY RADIOS. ACCESSORIES ANO SLOPLIES 
TRADE-INS AND REPAIRS 


BARRY ELECTRONICS CORP. 

512 BROADWAY 

NEW YORK, NY 10012 

212-925-7000 

EVERYTHING, PLUS FULL-SERVICE LAB TECKS 


B.C. COMMUNICATIONS 

THE 211 BLOG, DEPOT ROAD 
HUNTINGTON STATION. NY 11746 
316-549-8833 


AMATEUR ELECTRONIC SUPPLY 
! 


8URK ELECTRONICS 

35 N. KENSINGTON 

LAGRANGE, IL 60525 

708-482-9310 

MUCH HOBBY RADIO HARDWARE, PUBS. 
TRADE-INS, TECH ASSISTANCE. REPAIRS 


С. CRANE CO. 

558 - 16-9 STREET 

FORTUNA. CA 95540-2350 
707-725-9000 FAX 707-725-8050 
SCANNERS, SHORTWAVE. RADIOS, BOOKS 


COMMUNICATIONS ELECTRONICS 

PO BOX 1045 

ANN ARBOR, MI 48106-1045 
800-872-7226 

VHF-UHF SCANNER RADIOS, CB RADIOS, 
MARINE RADIOS 


COMMUNICATIONS SPECIALISTS 

426 WEST TAFT AVENUE 

ORANGE, CA 92665-4296 

B00-854-0547 714-998-3021 

RETROFIT CTCSS TONE EQ, MODEL TS-32P. 
FOR MOST RADIOS INCL SCANNERS 


COPPER ELECTRONICS 

3315 GILMORE INDUSTRIAL BLVD 
LOUISVILLE, KY 40213 
502-968-8500 

HOBBY RADIO, ACCESSORIES 


DANDY'S 

120 NORTH WASHINGTON 
WELLINGTON, KS 67152 

316-326-6314 

HOBBY RADIO, ACCESSORIES, TRADE-INS 


ELECTRONIC EQUIPMENT BANK (EEB) 
516 MILL ST 

VIENNA, VA 22180 

800-368-3270 

SWL, SCANNER RADIOS & ACCESSORIES 


GALAXY ELECTRONICS 

67 EBER AVE / BOX 1202 

AKRON, OH 44309 

216-376-2402 

CB PRODUCTS/ACCY'S, SCANNER & SWL EQ 


GILFER RADIO 

52 PARK AVE. 

PARK RIDGE, NJ 07656 
201-391-7887 

HOBBY RADIO, PUBLISHES ALSO 


GRE AMERICA, INC 

425 HARBOR BLVU. 

BELMONT, CA 94002 

415-591-1400 FAX 415-591-200: 
SCANNER ACCESSORIES, INCLUOING 
CONVERTERS, PRE-AMPS, ANTENNAS. ETC 


GROVE ENTERPRISES, INC. 

140 DOG BRANCH RD 

BRASSTOWN. NC 28902 

704-837-9200 

SWL & SCANNER EQUIP, ANTENNAS & MONITOR 
SUPPLIES, ALSO PUBLICATIONS INCLUDING 
MONITORING TIMES 


Resources 


RAM RADIO OUTLET 
EXCELLENT RESOURCE, WITH MANY HOBBY 
RADIO LINES, LITERATURE, BOOKS, PARTS, 
TECH HELP, ANO ACCEPTS TRADE-INS. ALL 
OVER: 
ANAHEIM, CA 714-533-7373 
ATLANTA, GA 404-263-0700 
DENVER, CO 303-745-7373 
OAKLAND, CA 415-534-5757 
PORTLAND, OR 503-598-0555 
PHOENIX, AZ 602-242-3515 
SALEM, NH 603-896-3750 
SAN DIEGO, CA 619-560-4900 
SUNNYVALE, CA 408-736-9496 
VAN NUYS, CA 818-988-2212 
WOODBRIDGE, VA 800-444-4799 


HENRY RADIO INC. 

2050 SOUTH BUNDY ORIVE 

LOS ANGELES, CA 90025 

800-877-7979 

HOBBY RADIO, MANY LINES. TRADE-INS OK 


JUN'S ELECTRONICS 

5563 SEPULVEDA BLVD 

CULVER CITY, CA 90230 

213-390-8003 

HOBBY RADIO, ACCESSORIES. DOES REPAIRS 


LENTINI COMMUNICATIONS 

21 GARFIELO ST 

NEWINGTON, CT 06111 

203-666-6227 

HOBBY RADIO, ACCESS, TRADE-INS, REPAIRS 


MACFARLANE ELECTRONIC, LTO 

RR #2 

BATTERSOA, ONT KOH 1H0 CANADA 
613-353-2800 

HOBBY RADIO EQ & SUPPLIES, TRADE-INS 


MARYMAC INDUSTRIES, INC. 

22511 KATY FREEWAY 

KATY, TX 77450 

800-231-3680 713-392-0747 

DISCOUNT MAIL ORDER FRANCHISE DEALER 
FOR RADIO SHACK PRODUCTS, SCANNERS 


MFJ ENTERPRISES, INC 

POB 494 

MISSISSIPI STATE, MS 39762 

800-647-1800 

HOBBY RADIO ACCESSORIES OF ALL SORTS 


MICHIGAN RADIO 
23040 SHOENHER 
WARREN, Mt 48089 
313-771-4711 


ROBBY RADIO, BROAD INVENTORY, TRADE-INS 


MIL-SPEC COMMUNICATIONS CO. 

PO BOX 461 

WAKEFIELD, RI 02880 

401-783-7106 

MiL-SPEC RECEIVERS, NEW & USED, CTCSS 


NEVADA 

189 LONDON RD, PORTSMOUTH 
HAMPSHIRE, ENGLAND 

0705-662145 869107 TELEX 

WIDE VARIETY OF EUROPEAN SCANNERS 
ACCY'S AND SHORTWAVE RADIO PRODUCTS 


OPTO-ELECTRONICS 

5821 NE 14TH AVE. 

FT. LAUDERDALE, FL 33334 

800-327-5912 

FAX 305-771-2052 

SSB COUNTER, HAND-HELD FREQ COUNTERS, 
AUTO-TUNE RECEIVERS 


PORTLAND RADIO SUPPLY 
234 SE GRAND AVE 
PORTLAND, OR 97214 
503-233-4904 


RADIO CENTER USA 

630 NW ENGLEWOOD ROAD 
KANSAS CITY, MO 64115 
800-821-7323 


RADIO CENTER USA 

12 GLEN CARRAN CIRCLE 

SPARKS, NV 89431 

800-345-5686 

HOBBY RADIO, ACCESS. ACCEPTS TRAOE-INS 


RADIO PLACE, THE 

5675A POWER INN ROAD 

SACRAMENTO, CA 95824 

HOBBY RADIO, ACCESSORIES, BOOKS, REPAIRS 


RADIO SHACK 

1500 ONE TANDY CENTER 

FT. WORTH, TX 76102 

817-390-3011 

OVER 7,000 STORES IN THE U.S. 
COMPUTERS & SCANNERS (!!), ANTENNAS, 
ACCESSORIES 


SATELLITE CITY 

2663 COUNTRY ROAD 1 

MINNEAPOLIS, MN 55112 
800-426-2891 

HOBBY RADIO EQ, REPAIRS, TRADE-INS 


SCAN COMMUNICATION СО 

PO BOX 911 

BURLINGTON, IA 52601 
319-752-3000 

HOBBY RADIO, ANTENNAS, ETC. 


SCANNER WORLD 

10 NEW SCOTLAND AVE 

ALBANY, NY 12208 

518-436-9606 

VHF-UHF SCANNER RADIOS, ACCESSORIES 


TELE * PATH 

49111 MILMONT DR 

FREMONT, CA 94538 

B00-292-1700 415-656-5600 

RADIO COMM. EQUIPT DEALER, RADIOS, 
AMPLIFIERS, TEST EQUIP 


TEN-TECH, INC. 

1185 DOLLY PARTON PARKWAY 
SEVIERVILLE, TN 37862 

615-453-0364 

TxRx, AMPS, ANT TUNERS, ENCLOSURES 


UNIDEN CORPORATION OF AMERICA 
4700 AMON CARTER BLVD. 

FT WORTH, TX 76155 
817-858-3300. TECH: 817-841-8615 
MANY SCANNERS, ACCESSORIES 
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UNIVERSAL ELECTRONICS INC. 

4555 GROVES ROAD, SUITE 13 
COLUMBUS, OH 43232 

800-241-8171 

BOOKS, SATELLITE AND SCPC RECEIVERS 


UNIVERSAL RADIO 

6830 AMERICANA PKWY 

REYNOLDSBURG, OH 43068-4113 
800-431-3939 614-866-4267 

SHORTWAVE, HAM & SCANNER RADIOS, ACCESS 


U. S. RADIO 

377 PLAZA 

GRANBURY, TX 76048 

RADIO SHACK EQUIPMENT, ACCESSORIES 


PERIODICALS, OTHER 
PUBLICATIONS 


ACE BULLETIN 

PO BOX 11201 

SHAWNEE MISSION, KS 66207-0201 
MONTHLY PUB FOR PIRATE, CLANDESTINE & 
NUMBERS MONITORING SWL HOBBYISTS 


AIRLINERS MAGAZINE 

BOX 52-1238, DEPT 5 

MIAMI, FL 33152-1238 

305-477-7163 FAX 305-599-1995 
MAGAZINE ON AIRLINERS, AIRLINES & AERO 


AMERICAN SCANNERGRAM 

50 VILLA ROAD 

SPRINGFIELD, OH 45503 

NEWSLETTER OF THE ALL OHIO SCANNER CLUB 


ANTENNEX 

PO BOX 8995, DEPT 19 

CORPUS CHRISTI, TX 78412 

MAGAZINE FOR ANTENNA EXPERIMENTERS 


ARTSOI INC 

POB 1428 

BURBANK, CÀ 91507 

818-843-4080 

MODS, LICENSE MANUALS, FREO & MAP BOOKS 


CLANDESTINE/CONFIDENTIAL NEWSLETTER 
RR#4, ВОХ 110 

LAKE GENEVA, Wi 53147 

NEWSLETTER: PIRATE & CLANDESTINE RADIO 


CQ COMMUNICATIONS, INC. 

76 N. BROADWAY 

HICKSVILLE, NY 11801 

516-681-2922 FAX 516-601-2926 

POPCOMM, CO, MANY OTHERS. 

XLNT PUBLISHER OF HOBBY ELEX PERIODICALS 


САВ RESEARCH BOOKS 

PO BOX 56 

516-543-9169 FAX 516-543-7486 

COMMACK, NY 11725 

HOBBY RADIO BOOKS — PERHAPS THE LARGEST 
ANO BEST CATALOG IN THE FIELO 


CTM MAGAZINE 

1704 SAM DRIVE 

BIRMINGHAM, AL 35235 

205-854-0271 

MAGAZINE FOR COMPUTERIST & HAM RAD‘O, 
PACKET RADIO 
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D C ENTERPRISES 

3420 TRENARY LANE 

COLORADO SPRINGS. CO 80918 

PUBLISHER: AIRCRAFT FREQUENCY DIRECTORY 


OX LISTENING DIGEST 

PO BOX 1684 

ENID. OK 73702 

MONTHLY PUB FOR SHORTWAVE LISTENERS 


FM ATLAS PUBLISHING 

BOX 336 

ESKC, MN 55733-0336 

PUBLISHER OF FM ATLAS AND FMEDIA 
NEWSLETTER, GUIDES 10 FM BROADCAST & 
SCA FOR TRAVELERS, НЕР, HOBBYISTS 


HIGHTEXT PUBLICATIONS, INC. 

7128 MIRAMAR ROAD, SUITE 15 

SAN DIEGO, CA 92121 

519-693-5900 

HOBBY BOOKS, SHORTWAVE, ANTENNAS, ETC. 


HR BOOKSTORE 

POB 208 

RINOGE, NH 03461 

800-457-7373 

HOBBY RADIO BOOKS, SOFTWARE 


INDEX PUBLISHING GROUP 

3368 GOVERNOR DRIVE 

SAN DIEGO, CA 92122 

800-546-6707 

PUBLISHER OF SCANNER BOOKS, 
INCLUDING SCANNERS & SECRET 
FREQUENCIES, EMERGENCY RADIO! 
THE ULTIMATE SCANNER, TRAVELSCAN 


IKLINGENFUSS PUBLICATIONS 

HAGENLOHER STR. 14 

D-7400 TUEBINGEN, W. GERMANY 
07071-62830 

PUBLICATIONS ON UTILITY & RTTY SHORTWAVE 


MENTOR PUBLICATIONS 

135-53 NORTHERN BLVD 

FLUSHING. NY 11354 

BOOKS ON SECURITY, SURVEILLANCE & 
RELATED ELECTRONICS 


MICROWAVE SYSTEM NEWS 

1170 EAST MEADOW DR 

PALO ALTO, CA 94308 

INDUSTRIAL. COMMUNICATIONS, ELECTRONICS. 
TRADE JOURNAL 


MICROWAVES & RF 

PO 80X 1043 

SOUTHEASTERN. PA 19398-9953 
RF/ELECTRONICS TRADE JOURNAL 


MOBILE RADIO TECHNOLOGY 

5851 5. MIDDLEFIELD RD 

LITTLETON, CO 80123 
INDUSTRIAL/COMMUNICATIONS/ELECTRONICS, 
TRADE JOURNAL 


MODERN ELECTRONICS 

76 N. BROADWAY 

HICKSVILLE, NY 11801 

MONTHLY MAGAZINE FOR EVERYTHING ELEX 


| MONITORING TIMES MAGAZINE 
PO BOX 88 
BRASSTOWN. NC 28902 
704-827-9200 
800-438-8155 
MONTHLY SCANNER & SHORTWAVE MAGAZINE 


NATIONAL SCANNING REPORT 
PO BOX 291918 

KETTERING. ОН 45429 
800-423-1331 

MONTHLY SCAMNER MAGAZINE 


NUMBERS FACTSHEET. THE 

PO BOX 149 

BRIARCLIFF MANOR, NY 10519 
"NUMBERS STATIONS" 


OFFICIA, SCANNER GUIDE 

PO BOX 712 

LONDONDERRY, NH 03053 

PUBLISHER OF FREQUENCY DIRECTORIES & 
“OFFICIAL” AERO FREQUENCY DIRECTORY 


POPULAR COMMUNICATIONS MAGAZINE 

76 N. BROADWAY 

HICKSVILLE, NY 11801 

516-681-2922 

RADIO COMMUNICATIONS CB, SWL & SCANNING 


RADIO MONITOR NEWSLETTER 

PO BOX 394 

HAMPSTEAD, MD 21074-0394 
NEWSLETTER FOR SCANNER & SWL 
HOBBYISTS: STATE OF MARYLAND 


RADIOSCAN MAGAZINE 

8250 NW 27TH ST, STE 301 

MIAMI, FL 33122 

305-594-7734 

MAGAZINE FOR RADIO HOBBYISTS & 
ENTHUSIASTS, NUMBERS, CLANDESTINE SE 


RADIO SPORTING MAGAZINE 

PO BOX 282 

PINE BROOK, NJ 07058 

MAGAZINE FOR RAMS & GENERAL RADIO 
ENTHUSIASTS 


SCANNER JOURNAL 

PO BOX 542 

SILVERADO, CA 92676 

714-545-9551 

PERIODICAL OF RADIO COMMUNICATIONS 
MONITORING ASSOCIATION (RCMA) 


RF DESIGN 

6430 S. YOSEMITE STREET 
ENGLEWOOD, CO 80111 

XLNT HOW-TO RF ENGINEERING 


SECRET CB 

PO BOX 8189 

CORPUS CHRISTI, TX 78412 
512-853-2935 

CB MODS, TUNEUPS 


SPEC-COM JOURNAL 

PO 80X 1002 

DUBUQUE, IA 52004-1002 

319-557-8791 

FAX 319-583-6462 

MAGAZINE ON SPECIALIZED COMMUNICATIONS 


STANDARD AMATEUR RADIO PRODUCTS, INC 
PO ВОХ 49480 

NILES, fl. 50648 

312-763-0061 

MOSTLY TRANSCEIVERS 


TAB BOOKS, INC. 

MONETREY LANE 

BLUE RIDGE SUMMIT. PA 17214 
747-794-2191 

CB SERVICE DATA & RADIO/TECHNICAL BOOKS 


THOMAS PUBLISHING 

127 WESTWOOD 

PARIS, IL 61944 

217-465-4210 

BOOKS ON CB RADIO MODS & TUNEUPS 


TIARE PUBLICATIONS 

PO BOX 493-G 

LAKE GENEVA. WI 53147 

PUBLICATIONS ON SW ANTENNAS, SWL. ETC 


WGE PUBLISHING, INC 
WGE CENTER 
PETERBOROUGH, NH 03458 
800-225-5083 

PUBLISHES 73 MAGAZINE 


WINSTON ARRINGTON 

7223 S. STONY ISLAND AVE 

CHICAGO, IL 60649 

ELECTRONIC EAVESDROPPING SURVEILLANCE 


WORLD RADIO MAGAZINE 

2120 - 28TH ST / PO ВОХ 189490 
SACRAMENTO, CA 95818 
916-457-3655 

AMATEUR RADIO NEWSPAPER 


WORLD RADIO-TV HANDBOOK 

1515 BROADWAY 

NEW YORK, NY 10036 

212-764-7300 

212-536-5266 

REFERENCE BOOK ON SHORTWAVE BROADCAST 
RADIO, FREQS, MUCH MORE. 


AND... 


WORLD SCANNER REPORT 

PO BOX 262478 

SAN DIEGO, СА 92196-2478 
619-578-9247  1:30PM-5:30PM, PST, 
WEEKDAYS 

BILL CHEEK'S SCANNER NEWSLETTER, 
FOLLOWS SCANNER MODS, & MUCH 
MORE. SUPPORTED BY AND 
INTEGRATED WITH THE HERT2IAN 
INTERCEPT BBS. 
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AC power supriy. 9 | Cellu'ar modiicatians, 131-043 
Ace customer service. 48 | legal aspects. РА! 
AOR customer service, 48 Cellular Telephone fndustry Association (CTIA). 135 
Audio improvements, 139 Cellular telephones. 133 
Auto birdie rejection, 152 Celluiar-capable scanners, 132 
AutoLog. 152 Cellular-modifiable scanners. 132 
AutoLookUp, 152 Clock. systetn. 69 
AutoProgramming, )52 Code Division Multiple Access. 134 
Compuserve, 15 
Banks, memory. 91 Computer interface, 18. 20. 93. 149-200 
BBS, Hertzian Intercept, The, 12 history and evoluuon, 149 
BBS. spreadsheet support of, 227 vendors. 150 
Bearcat customer service, 48 capturing scanner data via, 15} 
Beat frequencies. 70 Continuous frequency coverage, 26 
Binary numbers, 96 Continuous Tone Coded Squelch Systems (CTCSS), 27 
Birdies, rejection, 152 CPU upgrade, 138 
Block identifiers, programming chip changes. GRE. 38, 138 
16 block. Table 4-2, 92 
64 block. Table 4-3. 98 Data Tone Squelch (DTS). 121-130 
Bullington, Kenneth, 219 as opposed to SSQ. 121 
parts list for, 126 
Capacitor, electrolytic, markings, 162 Schematic of, 127 
CD-ROM, 17 DC power supply. 61 
CDMA (Code Division Multiple Access), 134 Decibels, 205 
CE-232 computer interface, 93. 149-200 Decryption circuitry and software, 26 
BBS support for, 194, 227 Diffraction loss, 222 
circuit board for, 160-161 Diode markings, 162 
connectors & cables for. 169 Diode matrix alteration, 39 
connections, 152 Discriminator chips. 143 
diagnostics. 189 DTMF, 27 
documentation of. 197 
errors, common, {п CE-232, 188 e-mail, 13 
functions and features, 152-153 ECHO, 14 
idiosyncrasies (no-program or no-stop). 192 EEPROM, 86 
insiallanon guide, internal, 173 | identifying, 106 
installauon. guide, external, 176 multiplying ої, 107 
keyboard matrix wiring, 184 Electroluminescent backlight panel. 41 
kits for, 198 Electronic Communications Privacy Act of 1986, 13) 
logic board connections, 177. 179, 183 
manual for, 155 FCC frequency database. 212 
operation of. 194 Features, desirable, 24 
parts & supplies, Table 8-/A&B, 156-157. 198. Table FidoNet, 13 
8-9, 199 Finding transmilter locations, 212 
power source for. 181 Floppy disk drives, 25 
protection circuitry for. 180 Frec space loss, 219 
resource list, Table 8-10. 200 Frequency counters. 62 
resistance and continuity checks, 191 Frequency data on CD-ROM. 197 
scanner contro! section. 186 Frequency standards. precision. 68 
schematic of. 159 Pureoonality тие. 24 


software Developer's Kit, 200 
technical support (92 General Research Electromics (GRE), 36 


tesi data тагтх, 190 Geodehe bearings and distance, 207 
i TS : ipic 200 
iroubleshooung. IRS | LOM puny. 36€ MEN 
venuor support for 197 р Global Pesitiompg Systems GPS. 212 
sepp l | 
wiring plan for. Tadles &-2 & 5-3, 167-168 
Celular frequency altocanons, 134. 126 


Giossary 23] 
GRE, see General Research Eleciomes 
Grcat Circle, 207 
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Herizian Intercept BBS. The. 12 Radio vs. Opucal Line-of-Sight (LOS), 209 
Hookup wire, 51 Regency customer service. 48 

Hot glue, 51 Remote control. 152 

IC sockets, 54 Resistor color codes, 162 

ICOM customer service, 48 Resources list, 237 

Information Superhighway. 16 Restoring mid FM-band. 139 

Interface, computer, see CE-232 RF detector probes. 63 

Internet, The, 13, 16 


S-meter. 21, 140 
JFET preamplifier, 80 from LEDs. 141 
use of to map cellular signals, 135 
Satellite reception, 28 
Scanner economics, 33 


Kenwood customer service, 48 
Keyboard design. 21 


Lautude & longitude calculations. 212 Schematic symbols, 203 

LCD driver chip, 41 Service manuals & techmcal disclosure. 30. 48 

Legal issues, 34 Shadow loss, 222 

Line-of-sight (LOS) esumates, 224 Shielding, 23 

LINKALL Extended Memory Controller, 99 Signal generators, 66 

Loganthms, 204 Soldering techniques. 50 

Logic prone, 80 Specifications, 23 

Logic/CPU board. 41 Spectrum analysis aná analyzers. 25 

Losses, Speed-ups, simple. 138, 139, 143, 145, 146 
Difiracuon. 222 ineligibility with CE-232. 190 
Free space. 219 Spreadsheet. 210 
Plane-earin. 221 terminology and symbology, Tuble 9-1. 215 
Shadow, 222 technical structure. 216 

Magneue north. 227 a eee чэ 

о Ses SRAM identification. Table 4-/. 88 

À Ие SSQ, 121 


Mechanical issues, 23 

Memory banks. 91 

Memory chip stacking. 104 
Memory expansion, 41. 85-11]. 147 
Memory. programmable. 21 
Memory, types of, 85 


Stance, failures caused by. Caver-3 

Status indicator, LED. 80 

Subsidiary Carrier Authorization (SCA). 113-120 
SCA defined, 113 
legalines, 114 


EEPROM. 86 kits Tor. 115 

SRAM. 86 TCXO. 69 

with CPU, 85 TDMA (Time Division Multiple Access). 134 
Memory, winng and switches for, 91 |. Telephone Disclosure and Dispute Resolution Act of 1994 
Modiications, general, 47-84 (Public Law 102-556), 131 
Molded connectors, hi-rel. 54 Television reception, 28 
Ohm's Law. 204 Test equipment, 62 
Oscillators. 66 Time Division Multiple Access. 134 

Tools. 55. 57 

Performance quantification. specs. 23 "Troubleshooting CE-232, 185 
Pin-line sockets & plugs, 52 Troubleshooting, general, 50 
Plane-earth loss, 221 True earth radius clearance. 225 
Polaris, 228 True North, 227 


Popularity of scanners, 30 
“к р. Ultimate Scanner candidate lists, 36 


AC. 9 es | 55 
DC. 61 sales estimates, scanners, 


Preamp. general purpose RF (J-FET), 30 customer service access. 48 


Preamp, general purpose RF (\/ А-6), 73 VADER. 197 
parts list and sources, 76 Voice Activated Digual Electronic Recorder (VADER), 197 
Propagation analysis spreadsheet, 218 Voice transmitter. converting oscillator to. 67 
Radio path analysis, 219 
Radio Shack. 3! WWV. 70 
sales estimates. scanners. 33 Yaesu customer service, 48 


customer service access. 48 


Bill Cheek (aka Dr. Rigormortie) 
: -= published the monthly Eleven Meter 
Times & Journ al, wrote the best-selling Scanner Modification Handbooks 
| Vols 1 & 2, and gince 1991 has published the influential monthly World 
1 Scanner Report, Bill is the author of a wealth of technical and do-it- 
і 3 youreeif features бирини in Fopular Communications, 5 -2/Hobby 
Radio, and other periodicals. He's the columnist of the "Experimenter's 
Workshop” in Monitoring Таар. d and ie known everywhere ae The Guru of 
the Scanning Hobby. His Hertzian Intercept BBS, for instance, is а 
rallying point for ecanniete around the world. 
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Bill's technical career began ae a Navy electronics technician during the 
Vietnam era, and advanced through electrical heat tit оң meteorological 
and air pollution engineering. satellite and space engineering. to 
president/CEO of a satellite comt nunications mar ufacturing corporation. 
Today, he's at the cutting edge of both the communication and the 
computing worlds, as a beta tester for Microsoft, a reviewer of technical 
books for some of America's leading publishers. and ie the acknowledgea 
master of makina electronics work better -- much better -- than the 
manufacturer ever dreamed possible! 

Bill's memberships in many professional and hobby organizations include 
the Radio Club of America. the Institute of Electrical and Electronic 
Engineers, MENSA, Associated 
Public Safety Communication 
Officers, REACT, and the 
Instrument Society of America. 


He is the Ultimate Scannist! 
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